Closed Bug 1557167 Opened 5 years ago Closed 5 years ago

Amazon Pay scripts blocked by Level 1 tracking protection list in private browsing

Categories

(Core :: Privacy: Anti-Tracking, defect, P2)

65 Branch
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: aakarsha, Assigned: stpeter)

References

(Blocks 1 open bug, )

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36

Steps to reproduce:

Amazon Pay is a 3p payment solution. We provide checkout option via Amazon on the other websites off Amazon. We have 20k+ websites integrated with us WW. With Mozilla script blocking feature, Amazon Pay doesn't work in firefox private anymore. This blockes 5k+ payment sessions resulting in a poor customer experience.

Steps to reproduce:
Amazon Pay flows uses iframe on merchant websites to render the content. With script blocking 3p request are blocked so amazon pay under iframe doesnt work.

Go to:

  1. Allsaints.com in private browser
  2. Put an item in cart and click amazon pay
  3. After clicking amazon pay, login and click agree.
  4. A popup comes with a message that "this payment method is not available for purchase". The popup doesn't autoclose as Amazon Pay(3p) had to return token to a merchant website(1p) via script in the background which is blocked by Mozilla in this case.
  5. Buyer gets stuck on this popup and isnt able to proceed with checkout

Actual results:

Amazon Pay checkout on private stopped working

Expected results:

Buyers on firefox private should be able to checkout using Amazon Pay

  1. https://www.allsaints.com
  2. Add an item to the cart.
  3. Click "Bag" in the top right corner, then "VIEW SHOPPING BAG".
  4. Click "PROCEED TO CHECKOUT".

Browser Console shows two instances of
The resource at “https://payments.amazon.co.uk/gp/apa/csm/jsonp?sellerId=…” was blocked because content blocking is enabled. | checkout

Blocks: tp-breakage
Status: UNCONFIRMED → NEW
Has STR: --- → yes
Component: Untriaged → Tracking Protection
Ever confirmed: true
Summary: Amazon Pay not working with script blocking on Mozilla private browsing → Amazon Pay scripts blocked by Level 1 tracking protection list in private browsing

:englehardt would you be the right person to look into this? It seems like it would have widespread effects.

Flags: needinfo?(senglehardt)

I asked our Amazon friends to submit this report, based on verbal discussions with them. Will coordinate with the relevant teams to verify and figure out solutions.

Flags: needinfo?(senglehardt)

Thanks, Peter! If you don't mind I'll needinfo you on this to signal who will move the bug forward :)

Flags: needinfo?(stpeter)
Priority: -- → P2

Amazon pay is blocked and hampering user experience. Can we have update.

On iOS devices, the user experience seems to be even worse. Tested with FF 15 and 17.2. Result was that pop-up for authentication window of Amazon Pay did not even appeared when clicking the button (so no reaction at all).

Kind regards,
Daniel

(In reply to Daniel Lemke from comment #6)

On iOS devices, the user experience seems to be even worse. Tested with FF 15 and 17.2. Result was that pop-up for authentication window of Amazon Pay did not even appeared when clicking the button (so no reaction at all).

The Firefox iOS browser is developed from a completely different codebase, in order to get the right people to look at that problem I filed bug 1563861.

Thanks Ehsan, added some more information on the newly filed bug.

Assignee: nobody → stpeter
Flags: needinfo?(stpeter)
Component: Protections UI → Privacy: Anti-Tracking
Product: Firefox → Core

This appears to be working for me now in strict mode: the Amazon Pay popup opened and seemed to be working, though I did not actually buy a product so I can't be 100% sure it worked completely. If it's still broken, please let us know so we can re-open the bug and investigate further.

As a side note, I see that Amazon Pay's business account sign-up page is broken in strict mode, as it relies on Marketo forms (I've left a comment in bug 1476572 about that).

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
Blocks: tp-amazon
No longer blocks: tp-breakage
You need to log in before you can comment on or make changes to this bug.