-
-
Notifications
You must be signed in to change notification settings - Fork 380
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
please add destinyitemmanager.com to yellowlist #2056
Comments
Hello! This may also be one of those cases where we have to teach Privacy Badger that several seemingly distinct domains actually belong to the same entity. We call these domains multi-domain first parties, or MDFP for short. If you have access to an affected Privacy Badger, could you run the following script in that Badger's background page console and share what it prints out? (function () {
const STR = "destinyitemmanager";
console.log("**** ACTION_MAP for", STR);
_.each(badger.storage.getBadgerStorageObject('action_map').getItemClones(), (obj, domain) => {
if (domain.indexOf(STR) != -1) console.log(domain, JSON.stringify(obj, null, 2));
});
console.log("**** SNITCH_MAP for", STR);
_.each(badger.storage.getBadgerStorageObject('snitch_map').getItemClones(), (sites, domain) => {
if (domain.indexOf(STR) != -1) console.log(domain, JSON.stringify(sites, null, 2));
});
}()); To get to the background page console in Chrome, visit In Firefox, visit |
One more: (function () {
const STR = "bungie.net";
console.log("**** ACTION_MAP for", STR);
_.each(badger.storage.getBadgerStorageObject('action_map').getItemClones(), (obj, domain) => {
if (domain.indexOf(STR) != -1) console.log(domain, JSON.stringify(obj, null, 2));
});
console.log("**** SNITCH_MAP for", STR);
_.each(badger.storage.getBadgerStorageObject('snitch_map').getItemClones(), (sites, domain) => {
if (domain.indexOf(STR) != -1) console.log(domain, JSON.stringify(sites, null, 2));
});
}()); |
I'm swinging by from @Thisisdim on Twitter. Our users can report that PrivacyBadger is blocking downloads of 3rd party content from Google, and Bungie.net. Here's an example: https://twitter.com/RickCasey/status/1001678558136291329 I tried it myself today and it didn't block on the first load. I'll keep using the extension and see if it triggers and blocks Bungie.net and Google for me. |
I visited DIM, and PB does identify bungie.net as a potential tracker. I haven't visited any other domains that include Bungie as a third party, so it's not blocked for me. This may be related to #1545. Can you check if dragging the "bungie.net" slider to cookieblock (yellow) fixes the issue? |
I'm guessing this is a If Bungie doesn't actually track users on their authentication service domains, Bungie can fix this on their end by posting EFF's Do Not Track policy on each authentication domain. This will tell Privacy Badger to always allow loading of resources from those domains. |
@jakibbe Does moving the slider for all |
Error report counts by page domain and exact blocked
|
Just got a user report today that https://www.d2checklist.com/ is having calls back to the Bungie.net API blocked (first block is a legit ad/tracking block; second block is the API call that shouldn't be blocked) |
@dcaslin Does moving the slider for all |
Unfortunately I wasn't able to reproduce the problem myself. I was about to add in some logic to my code that detects status code zero and says "Do you perhaps have Privacy Badger installed?" but figured I'd check with you all first to see if you could just whitelist bungie.net globally since it's been a recurring issue with 3rd party Bungie sites. |
How to get
Two |
Thanks for the tips! Yes that was able to simulate it and moving back to yellow fixed things. I'll update my warning to tell folks to slide the site to yellow or green. (And now I see why it's getting flagged, it's a shared host that multiple sites are calling back to). I suppose privacy badger doesn't have an option to default whitelist a site like bungie.net that's going to tend to look like a tracker in terms of behavior? |
We can put |
Yellowlisting will not fix authenticating through |
I just added "bungie.net" to Privacy Badger's yellowlist. You should see this update get applied to your Badger within the next day. You can also get it right away by restarting your browser. |
This site is an inventory manager for a popular video game, Destiny 2. Users need to be able to login to this site through the game developers site (bungie.net). Site users often think that destinyitemmanager.com is broken since Privacy Badger blocks access. Please consider adding destinyitemmanager.com to your yellowlist. Thanks!
The text was updated successfully, but these errors were encountered: