[Webkit-unassigned] [Bug 220901] New: Usercentrics overlay blocks usage of multiple websites

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=220901

            Bug ID: 220901
           Summary: Usercentrics overlay blocks usage of multiple websites
           Product: WebKit
           Version: Other
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: peter.weber at mailbox.org
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Hello!
For approximately one year I noticed that various websites are not usable because they load some sort of consent statement regarding cookies[1] or the GDPR. The websites show a transparent layer above the content - which prevents actual usage - and fail to show the usual buttons "OK" or "EVEN MORE COOKIES".

Examples:
German state of Bavaria - Corona regulations https://www.gesetze-bayern.de/Content/Document/BayEQV/true
Mey - Underwear manufacturer - https://www.mey.com/de/
Commerzbank - Bank https://www.commerzbank.de/

Example screeshot, with web-inspector open:
https://i.imgur.com/P9nu1sx.png

With the web-inspector, I'm able to hide the `div` element with the id `usercentrics-button` and access the website. Sadly I don't know what technically goes wrong. I noticed that Usercentrics GmbH [2] in Germany is providing this. It looks like Usercentrics GmbH figured out a way of making money off the consent dialogs. Just follow their customer list and you will find probably many broken websites. Maybe this JavaScript [3] includes the cause? 

Another prominent user of this is the Heise Verlag [4] but there it seems to work as desired. And the Heise Verlag uses another another JavaScript [5] file.

I'm running Archlinux with epiphany "3.38.2-1" and webkit2gtk "2.30.4-3".

Thank you


[1] Dear politicians. You tried to protect us and improve the web but you made it even worse.
[2] https://usercentrics.com
[3] https://app.usercentrics.eu/latest/main.js
[4] https://www.heise.de/
[5] https://app.usercentrics.eu/browser-ui/latest/bundle.js

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210124/d698619b/attachment.htm>