1825766 - privacy.resistFingerprinting: Glitched webgl shapes on echarts.apache.org: round bubbles become squares

Status: NEW

(Core :: DOM: Security, defect, P3)

Description

[Raul Bucata]

From github: https://github.com/webcompat/web-bugs/issues/120271.

<!-- @browser: Firefox 111.0 -->
<!-- @ua_header: Mozilla/5.0 (Windows NT 10.0; rv:111.0) Gecko/20100101 Firefox/111.0 -->
<!-- @reported_with: unknown -->

URL: https://echarts.apache.org/examples/en/editor.html?c=graphgl-npm-dep&gl=1&theme=dark

Browser / Version: Firefox 111.0
Operating System: macOS 13.3
Tested Another Browser: Yes Chrome

Problem type: Something else
Description: Glitched webgl shapes
Steps to Reproduce:
1, Enable "privacy.resistFingerprinting" in about:config
2, Open the page
<details>
<summary>View the screenshot</summary>
<img alt="Screenshot" src="https://webcompat.com/uploads/2023/3/6f139669-f979-4a11-bfc1-c3cfa98ebe85.jpg">
</details>

<details>
<summary>Browser Configuration</summary>
<ul>
<li>None</li>
</ul>
</details>

From webcompat.com with ❤️

Change performed by the Move to Bugzilla add-on.

Comment 1

[Raul Bucata]

The issue was reported via webcompat.com. Because a default pref was changed, we have moved the issue. Please feel free to move the issue to the relevant component and product.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Since nightly and release are affected, beta will likely be affected too.
For more information, please visit auto_nag documentation.

Comment 3

[Darkspirit]

Such surprising behavior can occur with privacy.resistFingerprinting=true.

Tested:
With privacy.resistFingerprinting=true circles become squares with transparent vertical stripes.
With privacy.resistFingerprinting.randomDataOnCanvasExtract=false one can at least remove transparent vertical stripes (bug 1663586), but circles are still squares.

Also reproducible with Firefox 69:
$ MOZ_DISABLE_CONTENT_SANDBOX=1 mozregression --launch 2019-05-20 --pref privacy.resistFingerprinting:true privacy.resistFingerprinting.randomDataOnCanvasExtract:false -a "https://echarts.apache.org/examples/en/editor.html?c=graphgl-npm-dep&gl=1&theme=dark"

Comment 4

[Fatih Kilic [:fkilic]]

The issue can be solved by granting extract canvas permission. I honestly think we can create a new bug where we just refer such bugs to there because many of the bugs in bug 1507517 are just about this specific permission grant