1889641 - Some queryParams are not being properly removed from Aliexpress

Status: RESOLVED DUPLICATE of bug 1889564

(Core :: Privacy: Anti-Tracking, defect)

Description

[Ciprian Georgiu, Desktop QA]

Found in

• latest Nightly 126.0a1

Affected versions

• latest Nightly 126.0a1

Tested platforms

• Affected platforms: Win 11, macOS 13 and Ubuntu 22.04

Preconditions

• Standard setttings is applied in about:preferences#security
• Set “privacy.query_stripping.enabled” to false in about:config.

Steps to reproduce

1. Navigate to https://www.aliexpress.com/gcp/300001064/aptaxwR82N?dp=a2g0o.bes
2. Right click on the link, then click on "Copy Without Site Tracking"
3. Open another tab and paste the copied linked into the URL bar.

Expected result

• The query parameter dp is correctly stripped from the URL, as per https://phabricator.services.mozilla.com/D203080

Actual result

• The query parameter is not stripped from the URL.

Regression range

• This is not a regression. It can also be reproduced with Nightly builds after the extened list of parameters was added.

Additional notes

• Other querry parameters that are not correctly stripped from amazon:
  spm - https://www.aliexpress.com/gcp/300001064/aptaxwR82N?spm=a2g0o.best.0.0.5dc12c25rAwzyt&disableNav=YES&pha_manifest=ssr&_immersiveMode=true&af=EAIaIQobChMIjIL484fshAMV87KDBx1VWQBrEAAYASAAEgJiSvD_BwE&%7Bifpla%3Ads_e_product_group_id&aff_fcid=02e4e4766aff4ff88d6e5bb687f6e22e-1710155024757-00864-_DBC6dBB&tt=CPS_NORMAL&aff_fsk=_DBC6dBB&aff_platform=portals-tool&sk=_DBC6dBB&aff_trace_key=02e4e4766aff4ff88d6e5bb687f6e22e-1710155024757-00864-_DBC6dBB&terminal_id=50244278182d4fa49f1ffef243f4d8b6

• All the aliexpress query params that were not stripped in our tests can be found in this .doc.

Comment 2

[Ciprian Georgiu, Desktop QA]

Abhishek, I've verified all the querry tracking parameters listed here, and they are cleared as expected with Beta 127.0b1 on macOS 13.

However it seems that there's still one paramater which is not stripped from Aliexpress, gps-id - https://www.aliexpress.com/item/1005006347244242.html?spm=a2g0o.detail.pcDetailTopMoreOtherSeller.2.535aIMb5IMb5gc&gps-id=pcDetailTopMoreOtherSeller&scm=1007.40000.327270.0&scm_id=1007.40000.327270.0&scm-url=1007.40000.327270.0&pvid=fb0ee933-8048-42f4-94f5-3f00e19c6773&_t=gps-id:pcDetailTopMoreOtherSeller,scm-url:1007.40000.327270.0,pvid:fb0ee933-8048-42f4-94f5-3f00e19c6773,tpp_buckets:668%232846%238116%232002&pdp_npi=4%40dis%21RON%2178.20%2111.26%21%21%21121.31%2117.46%21%402101fb1117101552051462963e0012%2112000036843276434%21rec%21RO%21%21AB&utparam-url=scene%3ApcDetailTopMoreOtherSeller%7Cquery_from%3A

Can you please take a look at this?

Comment 3

[Abhishek Madan[:abhishekmadan]]

Hi, I tested this myself and gps-id does get stripped, there is a another parameter that has gps-id in its value as In this case, the parameter is "_t" and the value is "gps-id:pcDetailTopMoreOtherSeller,scm-url:1007.40000.327270.0,pvid:fb0ee933-8048-42f4-94f5-3f00e19c6773,tpp_buckets:668%232846%238116%232002"

Comment 4

[Ciprian Georgiu, Desktop QA]

Got it! Thank you for the explanation, Abhishek!