1809209 - Redirecting SmartBlock shims can cause spurious CSP report-spam

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect)

Description

[Thomas Wisniewski [:twisniewski]]

As reported by an Amazon contact, they are receiving many CSP reports which are related to the StickyAdsTV shim.

This is because the shim is redirecting through a fake URL, redirect.firefox.etp, as there are sites which explicitly check whether request to their tracking pixels were redirected, and break otherwise (discovered in bug 1717806). But their CSP does not list this URL, so things break.

I believe it should be sufficient to just use a "less fake" URL which is on a common domain for that tracker likely to be included in such a CSP, so let's try that here.

Comment 1

[Thomas Wisniewski [:twisniewski]]

Attachment: Bug 1809209 - Avoid extra CSP reporting spam from redirecting SmartBlock shims; r?ksenia

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/de577f352d00
Avoid extra CSP reporting spam from redirecting SmartBlock shims; r=ksenia,webcompat-reviewers

Comment 3

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/de577f352d00