1925995 - collinsdictionary.com - The video is not playing with ETP Strict/Standard

Status: RESOLVED FIXED

(Web Compatibility :: Privacy: Site Reports, defect, P2)

Description

[railioaie]

Environment:
Operating system: Windows 11
Firefox version: Firefox 131.0.3 (release)

Preconditions:

• ETP set to STRICT/Standard
• Clean profile

Steps to reproduce:

1. Navigate to: https://www.collinsdictionary.com/dictionary/english/valuable
2. Play the video

Expected Behavior:
The video is playing correctly

Actual Behavior:
The video player is not displayed.

Notes:

• Not reproducible with ETP turned OFF (both Normal and Private Browsing)
• Reproducible on the latest Nightly

---

Created from webcompat-user-report:07a62698-63f9-4523-be2e-2cb4ea4376aa

Comment 1

[Benjamin VanderSloot [:bvandersloot]]

This is happening because we classify https://openfpcdn.io/botd/v1 (FingerprintJS) as an invasive fingerprinter (rightly), and they are gating loading youtube videos based on it working.

// HCD-5309 - We use BotD library to make sure user is not a bot before playing youtube videos
const botdPromise = import('https://openfpcdn.io/botd/v1').then((Botd) => Botd.load());

window.addEventListener('DOMContentLoaded', function() {
    handleBotDetection();
});

function handleBotDetection() {
    botdPromise
        .then((botd) => botd.detect())
        .then((result) => {
            if (!result.bot) {
                loadYoutubeApi();
                setupYouTubePlayers();
            }
        })
        .catch((error) => {
            console.error("handleBotDetection() " + error);
            document.querySelectorAll('.error-youtube').forEach(function(element) {
                element.style.display = 'flex';
            });

            document.querySelectorAll('.youtube-video').forEach(function(element) {
                element.style.display = 'none';
            });
        });
}

We can try outreach here, but I am tempted to figure out what to shim here

Comment 2

[Benjamin VanderSloot [:bvandersloot]]

Attachment: Bug 1925995 - Shim FingerprintJS Bot Detection - r=twisniewski!

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0a665a4ca633
Shim FingerprintJS Bot Detection - r=twisniewski,webcompat-reviewers

Comment 4

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/0a665a4ca633

Comment 5

[Donal Meehan [:dmeehan]]

:bvandersloot, I wonder if this should be considered for a beta uplift request given the S2 severity?
Of course that depends on the risk of uplifting the patch vs riding the train with Fx137.
What do you think?

Comment 6

[Benjamin VanderSloot [:bvandersloot]]

I don't think there is significant risk to uplifting it, especially this early into Beta, but it was unfixed a while before this.

Thoughts Tom on uplifting a shim?

Comment 7

[Thomas Wisniewski [:twisniewski]]

It's fine to uplift it if we'd like, as the risk should be very low as usual for such uplifts. I'm just not sure if it's really worth the effort (I'll leave it up to others to decide)?

Comment 8

[Donal Meehan [:dmeehan]]

No worries if not, it's not a new issue as mentioned but I thought it was worth asking