Fenix: [Bug]Tracking protection not working

[AndiAJ]

Prerequisites

Have tracking protection turned on globally and set to Strict mode

Steps to reproduce

1. Navigate to https://mozilla.github.io/tracking-test/ads.html
2. Navigate to https://senglehardt.com/test/trackingprotection/test_pages/ and select one by one the featured test pages.

Expected behavior

For 1. Confirmation that advertising resources are blocked should be displayed.
For 2. Having ETP set to Strict a confirmation saying Blocked on each test webpage

Actual behavior

For 1. Advertising resources are not blocked.
For 2. Only the Referrer Policy test page is blocked

Device information

• Android device:
  Samsung Galaxy Tab A (Android 9)

• Fenix version:
  • 2.3.0-rc.1 from 28/10
  • Nightly #13020608 from 29/10

Notes

►Video 1. https://mozilla.github.io/tracking-test/ads.html

►Video 2. https://senglehardt.com/test/trackingprotection/test_pages/

[Amejia481]

Thanks for the report I'm taking a look at it!

[Amejia481]

We found the issue on AC and we put a patch for it, as soon it gets merged it will be fixed https://github.com/mozilla-mobile/android-components/pull/4877

[Amejia481]

I'm unable to reproduce the issue on releases/v2.3branch? Could please verify? In standard the tracker shouldn't be blocked but in strict the tracker must be blocked

[ekager]

@AndiAJ both of these videos are from Nightly it looks like? Because in v2.3 you shouldn't be able to see the TP shield in the toolbar.

[ekager]

This issue should be fixed for Nightly users with the next build since the AC changes were merged ~3 hours ago

[AndiAJ]

@ekager - Yes, indeed the videos were from the Nightly build.

Due to the fact that on RC builds the shield and the 2 ETP settings options (Standard & Strict) aren't displayed I wanted to highlight that while having it set to Strict nothing is blocked.

[Amejia481]

To see the fix Fenix nightly has to use 20.0.0-SNAPSHOT as right now is using 19.0.0-SNAPSHOT

See https://github.com/mozilla-mobile/fenix/pull/6343

[Amejia481]

Now, this should be fixed

[AndiAJ]

Hi, I've just checked on the latest Nightly Build #13040608 from 31/10 using a Google Pixel 3a XL (Android 9) and noticed the following:

1. ✔️ https://mozilla.github.io/tracking-test/ads.html
   

2. ✔️ Checked ETP on different websites
   

3. ❓ https://senglehardt.com/test/trackingprotection/test_pages/
   

• Fingerprinting ONLY ✔️

• Cryptomining ONLY ✔️

• Fingerprinting and Cryptomining ✔️

• Fingerprinting and Cryptomining and Trackers ❓
Basic Tracking Protection List (base-track-digest256):
NOT BLOCKED

• Fingerprinting and Cryptomining and Cookies ✔️

• Fingerprinting and Trackers - ❓
Basic Tracking Protection List (base-track-digest256):
NOT BLOCKED

• Cryptomining and Trackers ❓
Basic Tracking Protection List (base-track-digest256):
NOT BLOCKED

• Trackers and Cookies (Level 1 & Level 2) ❓
Level 1 (Basic) List -- Combined
Level 1 Tracker blocking with combined list (base-track-digest256)
base-track-digest256:
NOT BLOCKED

Level 2 (Strict List) Tracker Blocking
content-track-digest256:
NOT BLOCKED

Cookie blocking
NOTE: If tracker blocking is enabled, these tests might not run
Level 1 (Basic) List -- Combined

• Advertising, Analytics, and Social - base-track-digest256:
  Cookies not blocked

• Social Tracking Protection ❓
Tracker blocking (social-tracking-protection-digest256)
NOT BLOCKED
Cookie blocking (social-tracking-protection-digest256)
Result: Cookies not blocked

• Social Tracking Protection and Fingerprinting ❓
STP Tracker blocking (social-tracking-protection-digest256)
NOT BLOCKED
STP Cookie blocking (social-tracking-protection-digest256)
Result: Cookies not blocked

• Social Tracking Protection and Cryptomining ❓
STP Tracker blocking (social-tracking-protection-digest256)
NOT BLOCKED
STP Cookie blocking (social-tracking-protection-digest256)
Result: Cookies not blocked

• Social Tracking Protection and Fingerprinting and Cryptomining ❓
STP Tracker blocking (social-tracking-protection-digest256)
NOT BLOCKED
STP Cookie blocking (social-tracking-protection-digest256)
Result: Cookies not blocked

@ekager , @Amejia481 - As you can see there are some Trackers and cookies that are not blocked.
Could you please review? I'm not sure if they should/shouldn't be blocked.

[Amejia481]

I will send some print screens to clarify how each page should look like per tracking protection policy (Standard and Strict)

[Amejia481]

Standard (We are only blocking cookies + CRYPTOMINING)

Fingerprinting ONLY (We are not blocking Fingerprinting in Standard)

Cryptomining ONLY

Fingerprinting and Cryptomining (We are not blocking Fingerprinting in Standard)

Fingerprinting and Cryptomining and Trackers (We are not blocking Fingerprinting in Standard)

Fingerprinting and Cryptomining and Cookies (We are not blocking Fingerprinting in Standard)

Fingerprinting and Trackers (We are not blocking Fingerprinting in Standard)

Cryptomining and Trackers

Trackers and Cookies (Level 1 & Level 2)

Social Tracking Protection

Social Tracking Protection and Fingerprinting (We are not blocking Fingerprinting in Standard)

Social Tracking Protection and Cryptomining

Social Tracking Protection and Fingerprinting and Cryptomining (We are not blocking Fingerprinting in Standard)

[Amejia481]

STRICT (We are blocking content from loading + AD+ ANALYTICS+ SOCIAL + CRYPTOMINING+ FINGERPRINTING )

Fingerprinting ONLY

Cryptomining ONLY

Fingerprinting and Cryptomining

Fingerprinting and Cryptomining and Trackers

Fingerprinting and Cryptomining and Cookies (We are not blocking Fingerprinting in Standard)

Fingerprinting and Trackers

Cryptomining and Trackers

Trackers and Cookies (Level 1 & Level 2)

Social Tracking Protection

Social Tracking Protection and Fingerprinting

Social Tracking Protection and Cryptomining

Social Tracking Protection and Fingerprinting and Cryptomining (We are not blocking Fingerprinting in Standard)

[AndiAJ]

Hi, verified as fixed on the latest Nightly Build #13050627 from 1/11 using a Google Pixel 3a XL (Android 9)

► Standard

► Strict

@Amejia481 - Many thanks for helping me out ! :smiley:

[Amejia481]

You are welcome @AndiAJ !