3 ms·

I'm a fan of ETP, except it breaks a lot of sites that use embeds. For example, sites that use Twitter or Instagram [1] embeds won't show the embeds. And there

I'm a fan of ETP, except it breaks a lot of sites that use embeds. For example, sites that use Twitter or Instagram [1] embeds won't show the embeds. And there's no way, as far as I can tell, to whitelist those. The only solution is to whitelist the sites that have embeds, but that ends up enabling all the tracking and stuff you don't want. [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1446243 https://bugzilla.mozilla.org/show_bug.cgi?id=1446243

duhi88 6y ago
Pretty sure that embeds enable all the tracking stuff you don't want, too.
- ffpip 6y ago
  Yes. Embeds aren't broken, they just appear text only. When you block twitter embeds , you can't like the tweet without opening the tweet in a separate tab. You can't do both. Either have the like functionality, or block it.
ilikehurdles 6y ago
Sounds like a good idea would be to somehow run the embeds in their own isolated container? Not sure how feasible that feature would be to implement.
- atombender 6y ago
  Indeed. Twitter, Instagram, and YouTube embeds all use iframes, so it should be entirely feasible to run these things in isolated containers.
  - the8472 6y ago
    adding the sandbox, csp and referrerpolicy attributes to the iframe when it gets inserted to the DOM tree allows a lot of fine-grained control. Adding sandbox without allow-same-origin puts it into a null origin which makes the iframe isolated from all other origins which is similar to an ephemeral container. It might break CORS stuff though.
floatingatoll 6y ago
If you haven't already, please consider opening up a Webcompat issue [1] about this. They'll definitely want to know since that's the sort of scenario that could end up breaking in multiple browsers — not just Firefox! — as tracking protection spreads across the ecosystem. [1] https://webcompat.com/issues/new https://webcompat.com/issues/new
sequoia 6y ago
Note to website/blog authors: please don't include twitter embeds in articles as the only way to read/view/hear the content!! - I use an ebook reader (Kobo) with Pocket to read saved articles and it can't load the embeds - I listen to articles with the screen reading feature on iOS and when it goes over embedded tweets it's a nightmare Many articles are nonsensical when you cut out the twitter embed that added key context or information to the article. Consider copy/pasting the text into the article & then linking to the tweet.

duhi88 6y ago

Pretty sure that embeds enable all the tracking stuff you don't want, too.

ffpip 6y ago
Yes. Embeds aren't broken, they just appear text only. When you block twitter embeds , you can't like the tweet without opening the tweet in a separate tab. You can't do both. Either have the like functionality, or block it.

ilikehurdles 6y ago

Sounds like a good idea would be to somehow run the embeds in their own isolated container? Not sure how feasible that feature would be to implement.

atombender 6y ago
Indeed. Twitter, Instagram, and YouTube embeds all use iframes, so it should be entirely feasible to run these things in isolated containers.
- the8472 6y ago
  adding the sandbox, csp and referrerpolicy attributes to the iframe when it gets inserted to the DOM tree allows a lot of fine-grained control. Adding sandbox without allow-same-origin puts it into a null origin which makes the iframe isolated from all other origins which is similar to an ephemeral container. It might break CORS stuff though.

floatingatoll 6y ago

If you haven't already, please consider opening up a Webcompat issue [1] about this. They'll definitely want to know since that's the sort of scenario that could end up breaking in multiple browsers — not just Firefox! — as tracking protection spreads across the ecosystem. [1] https://webcompat.com/issues/new https://webcompat.com/issues/new

sequoia 6y ago

Note to website/blog authors: please don't include twitter embeds in articles as the only way to read/view/hear the content!! - I use an ebook reader (Kobo) with Pocket to read saved articles and it can't load the embeds - I listen to articles with the screen reading feature on iOS and when it goes over embedded tweets it's a nightmare Many articles are nonsensical when you cut out the twitter embed that added key context or information to the article. Consider copy/pasting the text into the article & then linking to the tweet.