Re: [tor-bugs] #20249 [Applications/Tor Browser]: Captcha not displaying on hidden service mirror of bridges.torproject.org

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#20249: Captcha not displaying on hidden service mirror of bridges.torproject.org
--------------------------------------+------------------------
 Reporter:  cypherpunks               |          Owner:  isis
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  fixed
 Keywords:  bridgedb-reportbug        |  Actual Points:  1
Parent ID:                            |         Points:  1
 Reviewer:                            |        Sponsor:
--------------------------------------+------------------------
Changes (by isis):

 * status:  new => closed
 * points:   => 1
 * resolution:   => fixed
 * actualpoints:   => 1


Comment:

 Replying to [comment:4 isis]:
 > Replying to [comment:3 weasel]:
 > > So, should we get rid of
 > >         Header set Content-Security-Policy: "default-src 'self';"
 >
 > I think(?) if we remove that, then the images (when requesting the
 Hidden Service) will instead come from https://bridges.torproject.org. We
 could try changing it to:
 >
 > {{{
 >         Header set Content-Security-Policy: "default-src 'self'; img-src
 'self' data:;"
 > }}}
 >
 > That might work? It's probably getting tripped up on the data: URL.

 weasel added that, now it's fixed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20249#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs