From da7719b61d9a44e99df2f3a16644f6e1c3fcfdb3 Mon Sep 17 00:00:00 2001
From: Konrad Dzwinel <konrad@duckduckgo.com>
Date: Tue, 24 Sep 2024 11:51:30 +0200
Subject: [PATCH] Introduce bounce tracking test page. (#229)

---
 index.html                                    |  1 +
 .../bounce-tracking/bounce.html               | 53 +++++++++++++++++++
 .../bounce-tracking/index.html                | 30 +++++++++++
 privacy-protections/index.html                |  1 +
 4 files changed, 85 insertions(+)
 create mode 100644 privacy-protections/bounce-tracking/bounce.html
 create mode 100644 privacy-protections/bounce-tracking/index.html
diff --git a/index.html b/index.html
index 44c4b6b..9c37ea5 100644
--- a/index.html
+++ b/index.html
@@ -85,6 +85,7 @@ <h2>Privacy Protections Tests</h2>
 	<li><a href='./privacy-protections/query-parameters/'>Query Parameters</a></li>
 	<li><a href='./content-scope-scripts/runtime-checks/'>Runtime checks</a></li>
 	<li><a href='./privacy-protections/local-port-scan/'>Local port scanning</a></li>
+	<li><a href='./privacy-protections/bounce-tracking/'>Bounce tracking</a></li>
 </ul>
 
 <h2 id="autofill">Autofill</h2>
diff --git a/privacy-protections/bounce-tracking/bounce.html b/privacy-protections/bounce-tracking/bounce.html
new file mode 100644
index 0000000..258727c
--- /dev/null
+++ b/privacy-protections/bounce-tracking/bounce.html
@@ -0,0 +1,53 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Bounce Tracking Test Page - Bounce Page</title>
+</head>
+<body>
+
+    <p>Log:</p>
+    <textarea id='note' style='width: 500px; height: 200px;' readonly></textarea>
+    
+    <script>
+        const destinationSafelist = ['privacy-test-pages.site', 'first-party.site', 'good.third-party.site', '127.0.0.1:3000'];
+        const fieldName = 'bounceUID';
+        let uid = localStorage.getItem(fieldName);
+        const pageURL = new URL(location.href);
+
+        function say (text) {
+            document.getElementById('note').value += text + '\n';
+        }
+
+        function run () {
+            if (!uid) {
+                say('No ID found, generating new ID. ');
+
+                uid = Math.round(Math.random() * 100);
+                localStorage.setItem(fieldName, uid);
+            }
+            say(`ID is ${uid}.`);
+
+            if (!pageURL.searchParams.has('destination')) {
+                say('No destination provided.');
+            } else {
+                const destination = pageURL.searchParams.get('destination');
+                const delay = Number.parseInt(pageURL.searchParams.get('delay')) || 0;
+
+                if (!destinationSafelist.includes(destination)) {
+                    say(`Invalid destination '${destination}'.`);
+                } else {
+                    const redirectURL = new URL(`/privacy-protections/bounce-tracking/?bounceUIDlocalStorage=${uid}`, 'https://' + destination);
+                    say(`Redirecting to '${redirectURL.toString()}'.`);
+
+                    setTimeout(() => { location.href = redirectURL; }, delay);
+                }
+            }
+        }
+
+        run();
+    </script>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/privacy-protections/bounce-tracking/index.html b/privacy-protections/bounce-tracking/index.html
new file mode 100644
index 0000000..06f3c28
--- /dev/null
+++ b/privacy-protections/bounce-tracking/index.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Bounce Tracking Test Page</title>
+
+    <script src='./main.js' defer></script>
+</head>
+<body>
+    <p><a href="../../">[Home]</a> ↣ <a href="../">[Privacy Protections Tests]</a> ↣ <strong>[Bounce Tracking Test Page]</strong></p>
+
+    <p>Below links allow to bounce of bad.third-party.site to different locations. bad.third-party.site will pass its local UID to the destination via URL param.</p>
+
+    <p><a href='https://bad.third-party.site/privacy-protections/bounce-tracking/bounce.html?destination=good.third-party.site'>Go to good.third-party.site</a></p>
+    <p><a href='https://bad.third-party.site/privacy-protections/bounce-tracking/bounce.html?destination=first-party.site'>Go to first-party.site</a></p>
+    <p><a href='https://bad.third-party.site/privacy-protections/bounce-tracking/bounce.html?destination=privacy-test-pages.site'>Go to privacy-test-pages.site</a></p>
+    <!--<p><a href='./bounce.html?destination=127.0.0.1:3000'>Bounce local test</a></p>-->
+
+    <p id="result" style="font-weight: bold;"></p>
+
+    <script>
+        const pageURL = new URL(location.href);
+
+        if (pageURL.searchParams.has('bounceUIDlocalStorage')) {
+            document.getElementById('result').innerText = `ID received back is "${pageURL.searchParams.get('bounceUIDlocalStorage')}".`;
+        }
+    </script>
+</body>
+</html>
\ No newline at end of file
diff --git a/privacy-protections/index.html b/privacy-protections/index.html
index cfc8196..67207ac 100644
--- a/privacy-protections/index.html
+++ b/privacy-protections/index.html
@@ -27,6 +27,7 @@ <h1>Privacy Protections Tests</h1>
         <li><a href='./amp-loop-protection/'>AMP Loop Protection</a></li>
         <li><a href='./query-parameters/'>Query Parameters</a></li>
         <li><a href='./local-port-scan/'>Local port scanning</a></li>
+        <li><a href='./bounce-tracking/'>Bounce tracking</a></li>
     </ul>
     
 </body>
