Opened 5 years ago

Last modified 20 months ago

#11663 new defect

HTTPS-E v3.5.3 breaks youtube embedding on other sites (FF 29 / Chrome)

Reported by: Ache Owned by: zyan
Priority: High Milestone: HTTPS-E 3.5
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Normal Keywords: httpse-ruleset-bug
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The video on this URL http://norilskonline.ru/v-mire/kosmos/681-neopoznannyy-obekt.html is not played (and preview is not shown) unless I turn off "YouTube (partial)" rule.

Child Tickets

Change History (9)

comment:1 Changed 5 years ago by zyan

Priority: normalmajor
Summary: HTTPS-E v3.5.1 breaks youtube embedding on other sites (FF 29)HTTPS-E v3.5.1 breaks youtube embedding on other sites (FF 29 / Chrome)

Also confirmed on Chrome.

comment:2 Changed 5 years ago by NewEraCracker

Also confirmed with HTTPS Everywhere 2014.4.25 in Google Chrome 34.0.1847.131

I can reproduce the bug in this page.
http://sol.sapo.pt/inicio/Cultura/Interior.aspx?content_id=105304

comment:3 Changed 5 years ago by cypherpunks

See also:
https://trac.torproject.org/projects/tor/ticket/4408
and
https://code.google.com/p/gdata-issues/issues/detail?id=4299
Though this might be different, it looks like that bug may be Chrome only, where this one I can reproduce on Firefox.

Disabling BOTH the Google API AND Youtube rulesets on a page fixes this bug.

Last edited 5 years ago by cypherpunks (previous) (diff)

comment:4 Changed 5 years ago by Ache

Still present in 3.5.3

comment:5 Changed 5 years ago by Ache

Summary: HTTPS-E v3.5.1 breaks youtube embedding on other sites (FF 29 / Chrome)HTTPS-E v3.5.3 breaks youtube embedding on other sites (FF 29 / Chrome)

comment:6 Changed 5 years ago by NewEraCracker

Probably related with issue #12407

comment:7 Changed 5 years ago by jsha

I can still reproduce in FF31.0 with master and with 3.5.3 at http://norilskonline.ru/v-mire/kosmos/681-neopoznannyy-obekt.html, but the sol.sapo.pt link is now broken. I cannot reproduce in Chrome.

It's pretty mysterious. With the rule enabled, I don't see any additional errors. I do see HTTPS Everywhere rewriting the YouTube URL, but no subsequent fetche sin the Network panel for the rewritten URL.

From comment3, I agree that something like https://trac.torproject.org/projects/tor/ticket/4408 (content introspection differences) might be involved.

I also note that the problematic page uses http://norilskonline.ru/engine/editor/scripts/common/mediaelement/mediaelement-and-player.min.js, which might be trying to do something smart about loading various versions of the Youtube player.

comment:8 Changed 5 years ago by jsha

Also worth noting that other YouTube embeds, such as http://boingboing.net/2014/08/22/anti-super-pac-ads-from-anti-s.html, appear to work fine. So I think this is specific to the embeddeding JS used.

comment:9 Changed 20 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.