GDPR dialog handling when moving from Google to Youtube

[peace2000]

peace2000 Can fix it? Gif https://www.google.com/search?q=black+sabbath

Question from @dportvine

Personally, I could not find any working trusted-set-cookie filter set for that. Any ideas?

Should set "reject all".

[uBlock-user]

Should set "reject all".

Click on reject all, immediately pull up devtools, switch to storage and look for the cookie/localStorage item set by that button.

Now replicate that with the respective filter.

[peace2000]

That's what I tried but I couldn't find a working filter.

Though now as I investigated this more, it seems that I'd have to be able to set cookies for Youtube before I end up into that GDPR landing page.

So, when I use this filter:

google.*##+js(trusted-set-cookie, SOCS, CAESNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNjE4LjA4X3AwGgJmaSACGgYIgPvIpAY, 1year)

Then I go to cookiestorage and manually edit the domain of that cookie to .youtube.com, save and then click the Youtube icon, I can bypass the GDPR landing page.

This won't work:

youtube.com##+js(trusted-set-cookie, SOCS, CAESNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNjE4LjA4X3AwGgJmaSACGgYIgPvIpAY, 1year)

It will cause endless reloading.

But as set cookie doesn't have a function to set cookies for different domains, I can't do this with this scriptlet.

[peace2000]

I was trying to test how AG's trusted-click-element https://github.com/AdguardTeam/Scriptlets/blob/master/src/scriptlets/trusted-click-element.js would work for this, but I couldn't get it to work. Maybe because there are no clicking events associated to that "reject all" button as far as I understand.

What would help, would be that when visiting Google, it would be possible to pre-emptively set a "reject all" cookie for Youtube.

Something like this:

google.*##+js(trusted-set-cookie, SOCS, CAESNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNjE4LjA4X3AwGgJmaSACGgYIgPvIpAY, 1year, , , , domain=.youtube.com)

AG doesn't have a rule at all for that GDPR "landing" page.

@gorhill What you think about adding an option to set a cookie for a different domain than the user is currently vising?

[dimisa-RUAdList]

See also: uBlockOrigin/uBlock-issues#2229

[gorhill]

adding an option to set a cookie for a different domain than the user is currently vising

You can't do this, the document.cookie API does not allow this.

[krystian3w]

So Google in its JS asks the browser what cookies it has set for other subdomains, regional domains or seized portals? https://blog.mozilla.org/en/mozilla/firefox-rolls-out-total-cookie-protection-by-default-to-all-users-worldwide/ (Another issue is how they get around the mechanism with this, that any website can't check cookies globally and has to ask here)

[peace2000]

@dportvine

In case you use the latest dev build, you can try this set:

consent.youtube.com##+js(trusted-click-element, 'h1 ~ div[class] div[class][jsaction] > div[class][data-is-touch-wrapper="true"] > button[jsaction]')
consent.youtube.com##+js(trusted-click-element, 'h1 ~ div[class] div[jsaction] > div[class][data-is-touch-wrapper="true"] > button[jsname="lW531d"]')
consent.youtube.com##+js(trusted-click-element, 'h1 ~ div[class] div[jsaction] > div[class][data-is-touch-wrapper="true"] > button[jsname="NHcovd"]')
consent.youtube.com##+js(trusted-click-element, 'h1 ~ div[class] form[class][action] > div[class][data-is-touch-wrapper="true"] > button[jsname="j6LnYe"]', , 130)

I'm interested whether they work in different regions or not.

(Currently they don't work in uBO if combined into a one rule. That's why 4 rules that are meant to be used together.)

[peace2000]

When I open the link mentioned here: #20586 (comment)

I also get wsVcxe. Though that page is not the "landing page":
https://github.com/uBlockOrigin/uAssets/assets/17256841/8b9d62bf-cbfd-46e7-9853-634eedb9bf36

wsVcxe seems to appear only in the "Personalization settings & cookies" page:
https://github.com/uBlockOrigin/uAssets/assets/17256841/73536dd0-2f4f-4394-b9f9-1a96fe469e42

AFAIK you get to that page only if you have previously clicked "More options" in the landing page. Or is there a case when you get directly to the wsVcxe page?

When I open this link: https://consent.youtube.com/ml?continue=https://www.youtube.com/user/GeographyNow/?ucbcb=1&%27/**/%27=0x2F2A2A2F&SLeeP%283%29&ucbcb=1&ucbcb=1&ucbcb=1&ucbcb=1&ucbcb=1&ucbcb=1&ucbcb=1&ucbcb=1&gl=GB&hl=en-GB&pc=yt&uxe=23983171&src=1

I see the same values as well. How do you reproduce that page?

Asking questions because I'm trying to carefully review this case :).

[peace2000]

My link where I get tWT92d is this:

https://consent.youtube.com/m?continue=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCQplaZZ2mv8fo8Zd-1hQPzg%3Ffeature%3Dgws_kp_artist%26feature%3Dgws_kp_artist%26cbrd%3D1&gl=FI&m=0&pc=yt&cm=2&hl=en&src=1

[peace2000]

Now had time to check these.

Added a filter for that "modern" page: 2c8621b

I think that only the transition page should be handled, not the options page where you won't land directly.

[JohnyP36]

@peace2000 I'm using those rules

consent.youtube.com##+js(trusted-click-element, form[action="https://consent.youtube.com/save"] button[aria-label="Reject all"], , 2000)
www.youtube.com##+js(trusted-click-element, ytd-consent-bump-v2-lightbox > #dialog > #content .eom-buttons > .eom-button-row:nth-of-type(1) > ytd-button-renderer:nth-of-type(1) button, , 20000)

For background info see gorhill/uBlock@7af88b025d.

Be aware that you can't use the :has() operator to select an element, which is a pity.

[stephenhawk8054]

@gorhill Can we use xpath inside trusted-click-element ?

[gorhill]

You can't, that scriptlet has only access to the usual CSS selectors. Procedural cosmetic filtering is a completely different library and neither has knowledge of the other.

[krystian3w]

Be aware that you can't use the :has() operator to select an element, which is a pity.

Works fine for Chrome 105+.

Also works in Firefox with experimental preference (for Nightly 119-121 can be now true as default value, they probably won't make it quickly enough to make it to the stable version) - so scriptlet is not protected with same metod like procedular filters compatible with "CSS 4".

[peace2000]

@JohnyP36

Yeah, it's fine to click "reject all" but if that kind of rule is being used in uAssets, people will be unhappy because of broken Youtube history.

[JohnyP36]

@peace2000

Yeah, it's fine to click "reject all" but if that kind of rule is being used in uAssets, people will be unhappy because of broken Youtube history.

I know, but this kind of rule should only be for personal use. The risks are too high.