Repository: Automattic/wp-calypso

Issue #33077: Login: cannot view Masterbar on the front-end when "Prevent cross-site tracking" is on in Safari
Created: 2019-05-15T21:07:33Z
If you try logging in from the front-end to a WordPress.com site with a custom domain using Safari with the "Prevent cross-site tracking" setting on, it is confusing because it seems like the login did not work when it actually did and the Masterbar and other admin functions are missing on the front-end.
To prepare:

Setup a WordPress.com site with a custom domain.
Open Safari.
Go to Settings > Privacy.
Check the option for "Prevent cross-site tracking".
Close and re-open Safari.
Clear cache and cookies.

To test:

Go to your site home page.
Click ••• at bottom right and select "Log in".
Follow the prompts to log in.
Check to see that the Masterbar is visible and that you can interact with the admin pages such as by creating a new post.

Result: if "Prevent cross-site tracking" is checked then remote login works but the Masterbar and admin functions in the Action Bar do not work on the front-end of a site with a custom domain. (44s)
Note: *.wordpress.com and free *.blog domains such as wibblywobblytimeywimey.travel.blog appear to work normally. (33s)
Safari > Privacy > Website tracking > Prevent cross-site tracking screenshot:


Tested with Safari 12.1 on macOS 10.14.4 on `madefortesting0313.wordpress.com` a private WordPress.com Simple site.
Sample of console errors seen during login:
[Error] The source list for Content Security Policy directive 'script-src' contains an invalid source: ''report-sample''. It will be ignored.
[Error] [Report Only] Refused to load https://jetpack.com/remote-login.php?wpcom_remote_login=validate&wpcomid=20115252&token=JrlujCqY%2FZZ7zWFDadgz3eFRoH1CdJ%2BDDO0oy1vR22Mr%2F7gltrSq%2FacjvFWJbGcQCvGPI3zCvAw%3D%7C1119cfb41d328f16dbdb080a9af56fa71a79f4a025149960%7Ca7ecc2ac4639e9888ea57cedd1de74ba4c45f9b731&host=https%3A%2F%2Fjetpack.com because it does not appear in the frame-src directive of the Content Security Policy.

Related: WebKit article on Intelligent Tracking Prevention 2.2.
Workaround: log in at https://wordpress.com/log-in and manage the site there.
(internal reference: p1557936663211700-slack-mobile-support cc @diegoreymendez)

Duplicate issue #52683: Action Bar Not Working on Safari when Tracking Blocked
Created: 2021-05-07T19:23:47Z
Steps to reproduce the behavior

Setup a WordPress.com site with a custom domain.
Open Safari.
Enable "Prevent cross-site tracking"
Clear cache and cookies.

To test:

Visit site
Login

Action Bar does not change
What I expected to happen
Once a user logs in, the "Follow..." bar should update to reflect it.
What actually happened
The Action Bar does not update after login. It continues to show the "Follow..." text as if the user was logged out.
Browser / OS version
Safari / MacOS
Is this specific to the applied theme? Which one?
No
Does this happen on simple or atomic sites or both?
Simple. Did not text on Atomic.
Is there any console output or error text?
Level of impact (Does it block purchases? Does it affect more than just one site?)
Reproducibility (Consistent, Intermittent) Leave empty for consistent.
Screenshot / Video: If applicable, add screenshots to help explain your problem.

Closing comment (2021-06-08T14:37:19Z): Hey @bobmatyas , I'm closing this issue as a duplicate of #33077. This issue has been fixed as noted in this comment..