Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PrivacyBadger breaks logging in to blogger #2401

Open
bartblaze opened this issue Jun 19, 2019 · 2 comments
Open

PrivacyBadger breaks logging in to blogger #2401

bartblaze opened this issue Jun 19, 2019 · 2 comments
Labels
broken site MDFP Multi-domain first parties: lists of domains that should be treated as related to each other

Comments

@bartblaze
Copy link

What is your browser and browser version?

Chrome x64, v75.0.3770.100.

What is broken and where?

Attempting to log in to a personal Google blogspot, will redirect you to the logged in page, however; you aren't actually logged in. Moving the slider to Green (it is Yellow by default) will resolve the issue.

What is the "culprit" domain?

Logging in to *.blogspot.com, the culprit domain is *.blogger.com.

What is your debug output for this domain?

**** ACTION_MAP for blogger.com
VM130:5 accounts.blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 1559093813394,
  "userAction": ""
}
VM130:5 blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 0,
  "userAction": ""
}
VM130:5 draft.blogger.com {
  "dnt": false,
  "heuristicAction": "",
  "nextUpdateTime": 0,
  "userAction": "user_allow"
}
VM130:5 www.blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 1547901093413,
  "userAction": ""
}

Thank you!

@ghostwords
Copy link
Member

ghostwords commented Jul 11, 2019

Hello, thank you for the report, and apologies for not replying earlier!

Cookie-blocking blogger.com resources on blogspot.com domains seems to break functionality such as logging in and commenting.

What makes this tricky is that blogspot.com (and the various country code domains) is on the public suffix list as it is a hosting provider. This means we can't (and shouldn't?) tell Privacy Badger to treat all of blogspot.com as first party to blogger.com, not without changing our core logic anyway.

Edit: Although Firefox/Disconnect did exactly that: disconnectme/disconnect-tracking-protection@e363db5

This appears to be a scenario where (similarly to #137) we need a new approach as no existing workarounds apply.

@bartblaze
Copy link
Author

Thanks @ghostwords for your response, I'll monitor #137 then. 👍

@ghostwords ghostwords added the MDFP Multi-domain first parties: lists of domains that should be treated as related to each other label Feb 24, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
broken site MDFP Multi-domain first parties: lists of domains that should be treated as related to each other
2 participants