ghostery / broken-page-reports

8 stars 3 forks source link

drive.google.com #396

Open GRadziejewski opened 7 months ago

GRadziejewski commented 7 months ago

Description: Selected more than 2 files that download as a ZIP file are ultimately not downloaded

Steps to Reproduce:

  1. Login into gmail account
  2. Open https://drive.google.com/drive/home
  3. Select more than 2 files
  4. Click right mouse button to open menu and select download
  5. Wait for the creation of ZIP file and automatically downloading (12 sec on the video below)

https://github.com/ghostery/broken-page-reports/assets/40433708/a223f1c9-1570-49ba-b4fa-fd5d876f8c74

Expected Results: ZIP files should be downloaded normally

Versions:

Browser: Firefox 120.0
OS: Windows 10 Pro 
GBE 8.11.1

Browser: Chrome 119.0.6045.125
OS: Windows 10 Pro 
GBE 8.12.4

Browser: Opera One 105.0.4970.21
OS: Windows 10 Pro
GBE 8.12.4

Browser: Edge 119.0.2151.97 
OS: Windows 10 Pro 
GBE 8.12.4
chrmod commented 7 months ago

The breakage starts here - https://github.com/ghostery/common/blob/e35151f9222c514be8340161aa7cdcc63a619710/modules/antitracking/sources/attrack.es#L685

Question is why Anti-Tracking decided it is unsafe cookie.

chrmod commented 7 months ago

Looks like Anti-Tracking removes auth cookies for googleusercontent.com

Screenshot 2023-12-12 at 10 07 22
philipp-classen commented 7 months ago

Anti-tracking prevents Google from setting an essential cookie. I updated https://cdn.ghostery.com/antitracking/config.json to include an exception:

compatibilityList: { "googleusercontent.com": ["google.com"], ... }

However, the compatibility list is currently broken until we following code change is released as well: https://github.com/ghostery/common/pull/95