privacybadger icon indicating copy to clipboard operation
privacybadger copied to clipboard

PrivacyBadger breaks logging in to blogger

Open bartblaze opened this issue 5 years ago • 2 comments

What is your browser and browser version?

Chrome x64, v75.0.3770.100.

What is broken and where?

Attempting to log in to a personal Google blogspot, will redirect you to the logged in page, however; you aren't actually logged in. Moving the slider to Green (it is Yellow by default) will resolve the issue.

What is the "culprit" domain?

Logging in to *.blogspot.com, the culprit domain is *.blogger.com.

What is your debug output for this domain?

**** ACTION_MAP for blogger.com
VM130:5 accounts.blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 1559093813394,
  "userAction": ""
}
VM130:5 blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 0,
  "userAction": ""
}
VM130:5 draft.blogger.com {
  "dnt": false,
  "heuristicAction": "",
  "nextUpdateTime": 0,
  "userAction": "user_allow"
}
VM130:5 www.blogger.com {
  "dnt": false,
  "heuristicAction": "cookieblock",
  "nextUpdateTime": 1547901093413,
  "userAction": ""
}

Thank you!

bartblaze avatar Jun 19 '19 19:06 bartblaze

Hello, thank you for the report, and apologies for not replying earlier!

Cookie-blocking blogger.com resources on blogspot.com domains seems to break functionality such as logging in and commenting.

What makes this tricky is that blogspot.com (and the various country code domains) is on the public suffix list as it is a hosting provider. This means we can't (and shouldn't?) tell Privacy Badger to treat all of blogspot.com as first party to blogger.com, not without changing our core logic anyway.

Edit: Although Firefox/Disconnect did exactly that: https://github.com/disconnectme/disconnect-tracking-protection/commit/e363db5b78752e7a2861bf5d9a931ef539f018f6

This appears to be a scenario where (similarly to #137) we need a new approach as no existing workarounds apply.

ghostwords avatar Jul 11 '19 16:07 ghostwords

Thanks @ghostwords for your response, I'll monitor #137 then. :+1:

bartblaze avatar Jul 12 '19 18:07 bartblaze