1800567 - [Bug]: privacy.resistFingerprinting breaks touch gestures

Status: RESOLVED INVALID

(Core :: DOM: Events, defect)

Description

[Kevin Brosnan [Ex-Mozilla]]

From github: https://github.com/mozilla-mobile/fenix/issues/21225.

Steps to reproduce

1. Ensure privacy.resistFingerprinting is true in about:config
2. Navigate to openstreetmap.org
3. Try to manipulate the map via panning or pinch-to-zoom

Expected behaviour

Touch gestures should function properly

Actual behaviour

Touch gestures do not work

Device name

No response

Android version

Android 11

Firefox release type

Firefox

Firefox version

92.1.1

Device logs

No response

Additional information

Can reproduce on:

• Firefox Beta 93.0.0-beta.1, with the exception that panning does work
• Firefox Nightly 94.0a1, with the exception that panning does work
• Mull 92.1.1, with the exception that panning does work
• Mull 91.2.0
• Fennec F-Droid 91.2.0
• Tor Browser for Android 10.5.5 (91.2.0)

Cannot reproduce on official 92.1.1 due to lack of about:config.

Other things:

• maybe related: https://bugzilla.mozilla.org/show_bug.cgi?id=1382499
• cannot reproduce on maps.google.com
• double-tap to zoom does work
• you will likely need to restart app via Quit button (NOT force kill) when toggling resistFingerprinting

Other user reports:

• https://forum.f-droid.org/t/welcome-a-new-fennec-f-droid/11113/331
• https://forum.f-droid.org/t/welcome-a-new-fennec-f-droid/11113/332

┆Issue is synchronized with this Jira Task

Change performed by the Move to Bugzilla add-on.

Comment 1

[Kevin Brosnan [Ex-Mozilla]]

Looks like an intentional regression from bug 1382499.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1382499

Comment 3

[Hsin-Yi Tsai (she/her) [:hsinyi]]

(In reply to Kevin Brosnan [:kbrosnan] from comment #1)

Looks like an intentional regression from bug 1382499.

Hello Tim, would you be the right person to confirm if yhe above comment is true?

Comment 4

[Tim Huang[:timhuang]]

When fingerprinting resistance is enabled, Firefox will spoof the touch API to neutralize fingerprinting vector(Bug 1382499). Therefore, this is the intended behavior when RFP is enabled.

Comment 5

[Hsin-Yi Tsai (she/her) [:hsinyi]]

Thanks for the confirmation, Tim!

Comment 6

[Kevin Brosnan [Ex-Mozilla]]

While this is expected for desktop and the mouse events will still be sent. This breaks Firefox Android beta/nightly users that have enabled RFP and some downstream forks like Mull that ship RFP as a default. The user is extremely unlikely to have a mouse attached.