'no-workers: 1st-party false' is not effective

[theltalpha]

Prerequisites

• [x] I performed a cursory search of the issue tracker to avoid opening a duplicate issue
  • Your issue may already be reported.
  • [x] I also searched the existing issues at https://github.com/gorhill/uMatrix/issues
• [x] This is not a support issue or a question
  • Support issues and questions are handled at /r/uMatrix
• I tried to reproduce the issue when...
  • [x] uMatrix is the only extension
  • [x] uMatrix with default lists/settings
  • [x] using a new, unmodified browser profile
• [ ] I am running the latest version of uMatrix
• [x] I checked the documentation to understand that the issue I report is not a normal behavior
• [x] I used the logger to rule out that the issue is caused by my ruleset

Description

The setting 'no-workers: 1st-party false' in "My rules" does not show the expected behaviour.

A specific URL where the issue occurs

https://vorarlberg.orf.at/stories/3046065/

Steps to Reproduce

1. In "My rules" implement the rules 'no-workers: * true' to block workers globally and 'no-workers: 1st-party false' to relax the global rule and allow workers for first party domains.
2. Open the above mentioned webpage. At the end of the article there is a video.
3. In the switchboard in the 'orf.at' scope allow everything first party and additionally XHR for apasfiis.sf.apa.at in order to load the website correctly. Reload the page.
4. Open uMatrix logger and click on the play button of the video. In the logger you will notice one red entry. The invoking website's domain is vorarlberg.orf.at, its a worker and the blocked element is https://vorarlberg.orf.at/stories/3046065/.

Now, this is strange. The blocked element is first party in regard to the invoking website, but according to the rules this should be allowed. Even if I click on -- the rules are represented correctly in the switchboard:

But the video won't play. Only if I specifically add 'no-workers: orf.at false' as a rule it would play the video.

Ruleset

As described above.

Your environment

• uMatrix version: 1.4.0
• Browser Name and version: Firefox Quantum ESR 68.7.0 (64 Bit)
• Operating System and version: Debian GNU/Linux 10.3 (64 Bit)

[gorhill]

The blocked element is first party in regard to the invoking website, but according to the rules this should be allowed.

The per-scope switches are independent from matrix filtering, they do not inherit their state from matrix filtering rules.

See https://github.com/gorhill/uMatrix/wiki/Per-scope-switches.

[uBlock-user]

That's not a valid rule either, you put * or domain there.

[gorhill]

I don't think it's invalid, the screenshot shows an issue: it shows an allow rule for worker type. The issue is that the logger is wrong, uMatrix does not support such rule for worker. This has been fixed in dev build of uMatrix, this is what one get now when clicking on a row with worker resource:

[uBlock-user]

I don't think it's invalid,

So we can use 1st-party instead of * or the domain itself ?

[gorhill]

No, not for per-scope switches. I didn't even realize the whole issue was about this.