1805158 - Unable to add videos to the playlist on youtube.com with Standard ETP

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Calin Tanase (OOO until 22nd of Nov)]

Attachment: yt playlist.mp4

Environment:
Operating system: Windows 10
Firefox version: Nightly 109.0a1 (2022-12-11)

Preconditions:
• ETP set to Standard
• Clean profile
• logged into youtube account
• youtube playlist created

Steps to reproduce:

1. https://www.youtube.com
2. Click on any playlist you've created.
3. Click on the playlist settings (kebab menu).
4. Add videos.
5. Search for any video in the pop-up window.
6. Observe the behaviour.

Expected Behaviour:
Video results are displayed.

Actual Behaviour:
There are no video results and the browser freezes.

Notes:

1. Video provided
2. Reproducible on both Firefox Release and Nightly with Standard ETP
3. Not reproducible with ETP OFF
4. Same behaviour in private

Comment 1

[Paul Zühlcke [:pbz]]

I can reproduce on Ubuntu 22.04.1 LTS, 107.0.1 (64-bit)
Does not reproduce with cookie behavior set to 4.

Comment 2

[Paul Zühlcke [:pbz]]

Locally skip-listing seems to fix the issue:
privacy.restrict3rdpartystorage.skip_list = "https://www.youtube.com,https://docs.google.com"
The video picker uses an iframe from Google Docs: https://docs.google.com/picker?[...]

Comment 3

[Paul Zühlcke [:pbz]]

This is now allow-listed and should be fixed temporarily (see Bug 1805210) while we work on a shim and reach out to Google about the breakage.

For QA: When looking for a regression-window in order to reproduce the bug (even if it's allowlisted), you can flip privacy.antitracking.enableWebcompat to false.

Comment 4

[Paul Zühlcke [:pbz]]

This is broken in Safari and Chrome Incognito too.

Comment 5

[Alexandru Trif, Desktop Test Engineering [:atrif]]

Hello! I searched for a regression range on Windows 10x64 using privacy.antitracking.enableWebcompat pref set to false and these are the results:
Last good revision: d48aa0f0aa0bbe69f8eae663be2f5671c41af27c (2020-06-23)
First bad revision: 1004d422aedb5994f9f2949fd4a4c67bc89e22c7 (2020-06-24)
Pushlog:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=d48aa0f0aa0bbe69f8eae663be2f5671c41af27c&tochange=1004d422aedb5994f9f2949fd4a4c67bc89e22c7
Unfortunately, I don't know which of the issue is the regressor. Also, note that privacy.antitracking.enableWebcompat pref is not available in those builds.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

This bug has been marked as a regression. Setting status flag for Nightly to affected.

Comment 7

[Ryan VanderMeulen [:RyanVM]]

Bug 1628486 seems like the likely culprit from the regression range in comment 5. That said, given that this is a longstanding issue which affects other browsers as well, I'm clearing the regression keyword as it doesn't seem overly useful to track this bug as such.

Comment 8

[Paul Zühlcke [:pbz]]

Contacted YouTube, lowering severity and priority given that it's temporarily allow-listed.

Comment 9

[Paul Zühlcke [:pbz]]

Seems fixed, need to verify and remove the partitioning allow-list.

Comment 10

[Paul Zühlcke [:pbz]]

Fixed by YouTube, the docs.google.com frame is using the Storage Access API to request first-party storage access after which the video search works.