filmar.ch: breakage #35097

Prerequisites

• This is NOT a YouTube, Facebook, Twitch, Spotify or a shortener/hosting site report.
• I read and understand the policy about what is a valid filter issue.
• I verified that this issue is not a duplicate.
• I did not remove any of the default filter lists.
• I did not enable additional or non-default filter lists (uBlock Origin Lite default lists / Basic & Optimal modes).
• I do not have custom filters/rules (reproduced without custom filters).
• I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
• I have turned off all other extensions and the issue still persists (only uBOL enabled).
• If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site or browser issue.
• I have verified that the browser I am using is up to date with no pending updates.
• I did not answer truthfully to ALL the above checkboxes.

URL(s) where the issue occurs

https://filmar.ch/

(WordPress storefront embedding the Ticketack widget; third-party XHR to filmar.ticketack.com)

Blocked request example:

https://filmar.ticketack.com/tickettypes/list?cart_id=<uuid>&lang=fr

(also blocked with only ?lang=fr)

Description and steps to reproduce

Breakage / false positive with uBlock Origin Lite (reproduced in Basic and Optimal modes). Disabling uBOL fixes the page.

On the FILMAR subscriptions page, the widget fails to load sellable passes/subscriptions with:

• DevTools Network: status (blocked:other), size 0.0 kB, warning Provisional headers are shown
• Console: Failed to load resource: net::ERR_BLOCKED_BY_CLIENT on /tickettypes/list
• UI error: unable to load subscriptions

This is a legitimate first-party ticketing API for a cinema festival (Ticketack). It is not analytics/ads.

Matching filter (uBOL-only block in filters/filters-general.txt, under !#if ext_ubol):

/^https:\/\/([a-z]{2}|[a-z]{5,7})\.[a-z]{7,14}\.com\/[rt][0-9A-Za-z]{10,16}\/[A-Za-z]{4,5}(?:\?|$)/$script,xhr,3p,match-case

Context / related comments in that file point at generic ad CDN patterns (e.g. discussion #790 / commit notes around NSFW popup CDNs).

Why this URL matches as a false positive:

Notes:

• Same-origin use of *.ticketack.com is unaffected ($3p).
• Tenants whose subdomain length is not 2 or 5–7 letters are unaffected (e.g. 3, 4, or 8+).
• Full uBO (non-Lite) may not apply this exact ext_ubol rule the same way; this report is specifically about uBlock Origin Lite.

Suggested fix: exception such as:

@@\|\|ticketack.com^$xhr,3p

or tighten the regex so real product API paths like /tickettypes/list are excluded.

Browser name and version

Google Chrome 152.0.0.0 on Linux (x86_64)

Other extensions used

uBlock Origin Lite only (for the clean repro). Originally noticed alongside other extensions; confirmed still blocked with only uBOL.

Country

Switzerland

Screenshot(s)

Network tab shows the tickettypes/list fetch as (blocked:other) with provisional headers (request never leaves the browser). Console shows ERR_BLOCKED_BY_CLIENT for the same URL. Happy to attach PNGs in a follow-up comment if needed.

Configuration

uBlock Origin Lite — filtering mode Basic and Optimal both break the page; disabling filtering for the site (or disabling the extension) restores /tickettypes/list.

Default lists only; no custom filters for the repro.