1865627 - The payment form is not shown at avalpaycenter.com with ETP set to STANDARD

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Raul Bucata]

Attachment: Untitled.png

Environment:
Operating System: Windows 10 PRO x64
Firefox version: Firefox Nightly 121.0a1 (2023-11-19)

Preconditions:
ETP set to STANDARD
Clean profile

Steps to reproduce:

1. Navigate to : https://www.avalpaycenter.com/wps/portal/portal-de-pagos/web/pagos-aval/resultado-busqueda/realizar-pago?idConv=00023228&origen=buscar&bancaEmpresarial=false&login=temporal
2. Wait for the page to load.
3. Observe the result.

Expected Behavior:
The payment form is loaded

Actual Behavior:
The payment form is missing

Notes:

• Not reproducible with ETP turned OFF(Both Normal and Private Browsing)
• Works as expected using Chrome
• Screenshot attached

Comment 1

[Tim Huang[:timhuang]]

It's because we've blocked cookie access for cloudfront as part of ETP protection.

Comment 2

[Tim Huang[:timhuang]]

We will allowlist cloudfront from the cookie blocking because Total Cookie Protection has provided protection against third-party tracking using cookies. Blocking cookies for cloudfront won't improve privacy but bring site breakages.

Comment 3

[Tim Huang[:timhuang]]

Attachment: Bug 1865627 - Add cloudfront.net to the tracking-annotation skip urls. r?#anti-tracking!

Comment 4

[Tim Huang[:timhuang]]

Updated: We will allow the domain d3vox9szr7t2nm.cloudfront.net, which is specific to this breakage.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/d2c372105745
Add cloudfront.net to the tracking-annotation skip urls. r=anti-tracking-reviewers,pbz

Comment 6

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/d2c372105745