search

mozilla / multi-account-containers

Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs that preserve your privacy. Cookies are separated by container, allowing you to use the web with multiple identities or accounts simultaneously.
https://addons.mozilla.org/firefox/addon/multi-account-containers/
Mozilla Public License 2.0
2.74k stars 343 forks source link

PayPal payments not working #2244

Open tsssystems opened 2 years ago

tsssystems commented 2 years ago

Actual behavior

When trying to use PayPal to pay for an eBay purchase, pop-up window opens in tab instead. Even if tab set to open in "no container", payment page goes into endless loop: when payment is submitted, page goes back to "select payment type" page instead of submitting the payment. Pop-ups from paypal.com are permitted in about:preferences#privacy/Block pop-up windows/Exceptions

Expected behavior

PayPal payment page to appear in pop-up window, allowing payment to be processed normally.

Steps to reproduce

  1. Set PayPal to always open in a container.
  2. Allow all scripts to run on paypal.com (NoScript).
  3. Block pop-ups but allow exception for PayPal.
  4. Make a purchase on eBay using PayPal (or another site that uses PayPal pop-up functionality).
  5. Try completing purchase

Notes

This issue first noticed at least 1 year ago, but don't know which versions of software were installed at that time, except noticed on both FF Developer Edition and regular release edition. Completed these payments in different browsers (Opera, Edge) without issue. Have noticed this same problem on other sites (like my ISP) that use PayPal pop-up app to accept payments, but not on sites that do not use pop-ups (such as authorize.net). There, PayPal payments complete normally, even inside containers.

Workaround is to disable Multi-account Containers before clicking on PayPal payment link in eBay. Pop-up loads normally and transaction can be completed.

Additional info from raw data dump available on request.

Additional Informations

Also please make sure that:

Add-ons

Name                                             Type           Version             Enabled     ID
Add-ons Search Detection             extension  2.0.0           true            addons-search-detection@mozilla.com
Amazon.com                                   extension  1.3                 true            amazondotcom@search.mozilla.org
Bing                                                     extension  1.3                 true            bing@search.mozilla.org
CryptoMining Blocker                     extension  0.0.13          true            {de14aaf1-ca77-4046-bb69-57fe9b071139}
DuckDuckGo                                   extension  1.1                 true            ddg@search.mozilla.org
DuckDuckGo Privacy Essentials         extension         2021.9.30         true          jid1-ZAdIEUB7XOzOJw@jetpack
eBay                                            extension           1.3                 true            ebay@search.mozilla.org
Facebook Container                          extension           2.3.1           true            @contain-facebook
Firefox Multi-Account Containers    extension           8.0.4           true            @testpilot-containers
Google                                          extension           1.1                 true            google@search.mozilla.org
NoScript                                            extension           11.2.11         true            {73a6fe31-595d-460b-a920-fcc0f8843232}
Privacy Badger                                  extension           2021.11.23.1    true            jid1-MnnxcxisBPnSXQ@jetpack
Show/Hide passwords                 extension           0.4                 true            shpassword@shpassword.fr
Tab Session Manager                 extension           6.11.1          true            Tab-Session-Manager@sienori
Wikipedia (en)                                  extension           1.1                 true            wikipedia@search.mozilla.org
Cisco Webex Extension                   extension           1.17.0          false           ciscowebexstart1@cisco.com
Easy Youtube Video Downloader Express   extension   17.5                    false           {b9acf540-acba-11e1-8ccb-001fd0e08bd4}
Firefox Color                                   extension           2.1.7           false           FirefoxColor@mozilla.com
SQLite Manager                          extension           0.3.1           false           {7d2676a5-0546-4e2a-9019-aa9d8345be1e}
Undo Close Tab                          extension           7.4.0           false           {4853d046-c5a3-436b-bc36-220fd935ee1d}
devurandom commented 2 years ago

Is this a duplicate of https://github.com/mozilla/multi-account-containers/issues/1884 ?

devurandom commented 2 years ago

In my experience having the site and PayPal in separate containers works for some (most?) sites, but not for others. A distinguishing factor might be whether the site shows a modal / popup telling me to find the PayPal browser window (in which case containerisation does not work, because Firefox Multi Account Containers closes the window when opening PayPal in a separate container).

tsssystems commented 2 years ago

May be a duplicate, but we didn't mention anything about printing. In any case, when searching issues, we didn't see #1884.

We currently turn off Multi-account Containers whenever we're paying with PayPal, because we've had this problem with other sites. We have PayPal opening in the banking container by default. This always occurs whenever Firefox forces a new tab to open instead of allowing a pop-up, even though pop-ups are allowed from paypal.com in preferences.

Also, re: 1884, we no longer use Firefox's printing function, because it seems to always want to print at 400% no matter what sizing is selected. Doesn't matter which printer, or whether it's on a network or directly connected. We always print using the systems dialog. Been this way since sometime in the 90's releases...

On 10/1/2022 4:05 AM, Dennis Schridde wrote:

Is this a duplicate of #1884 https://github.com/mozilla/multi-account-containers/issues/1884 ?

— Reply to this email directly, view it on GitHub https://github.com/mozilla/multi-account-containers/issues/2244#issuecomment-1264298902, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABUR7SD3DFXAJGV6WIKJT7LWA75D3ANCNFSM5KJSTYDA. You are receiving this because you authored the thread.Message ID: @.***>

--

/Development at tsssystems.net/ Web design and application development, hosting, domain names and DNS management Virtual events, webcasting, live streaming and Zoom meeting / webinar management 4740 N Cumberland Av # 303 Chicago IL 60656 773-275-5777 @.***

dannycolin commented 1 year ago

Set PayPal to always open in a container.

IIUC, you assigned Paypal to Container A and opened Ebay in Container B (or no container)? If that's the case then it is expected that you can't load Paypal outside its assigned container. You need to remove the assignment. See https://github.com/mozilla/multi-account-containers/wiki/Frequently-asked-questions#remove-always-open-in-site-from-a-container

This is a limitation in the way the "Always open in" is implemented. There's a feature request to have a way to allow a domain in multiple containers. See #1749

tsssystems commented 1 year ago

@dannycolin Thanks. That's why we turn off Multi-Account Containers when paying with PayPal on ebay. We'll certainly use one of the solutions mentioned in #1749 when it becomes available, although I'm not certain it would solve this particular issue, when the site generates the pop-up instead of a new tab. We like to keep our financial tabs (containers) separate from our commercial (like ebay). BTW, we've been using MAC since its release, and currently use 38 containers - many for a single website.

dannycolin commented 1 year ago

[A]lthough I'm not certain it would solve this particular issue, when the site generates the pop-up instead of a new tab.

If both websites are assigned to a different containers, it won't and MAC will reopen it in a new tab.

  1. Open mystore.com
  2. Click on Paypal button
  3. Paypal is reopened in a tab instead of a popup

However, if Paypal was to be allowed in both containers, it should work since Paypal will create a cookie in each of the containers it is allowed to be in. This might break the container isolation in the sense that you're connected to the same account in both containers so Paypal is aware of both context. However, Firefox now has a new security feature called Total Cookie Protection that should still prevent ebay.com to spy on paypal.com and vice-versa even if they're in the same container.