February 2021 - tor-commits - lists.torproject.org

[tor/maint-0.4.5] Only check for bindable ports if we are unsure if it will fail.
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 67aefd5520c7d9b3004ee25b860e5b54b3401188 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Feb 4 23:11:11 2021 +0000 Only check for bindable ports if we are unsure if it will fail. We currently assume that the only way for Tor to listen on ports in the privileged port range (1 to 1023), on Linux, is if we are granted the NET_BIND_SERVICE capability. Today on Linux, it's possible to specify the beginning of the unprivileged port range using a sysctl configuration option. Docker (and thus the CI service Tor uses) recently changed this sysctl value to 0, which causes our tests to fail as they assume that we should NOT be able to bind to a privileged port *without* the NET_BIND_SERVICE capability. In this patch, we read the value of the sysctl value via the /proc/sys/ filesystem iff it's present, otherwise we assume the default unprivileged port range begins at port 1024. See: tor#40275 --- src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-) diff --git a/src/test/test_switch_id.c b/src/test/test_switch_id.c index baddf8d66e..91277e374f 100644 --- a/src/test/test_switch_id.c +++ b/src/test/test_switch_id.c @@ -31,7 +31,47 @@ static const struct { { NULL, 0 } }; +/* Returns the first port that we think we can bind to without special + * permissions. Usually this function returns 1024. */ +static uint16_t +unprivileged_port_range_start(void) +{ + uint16_t result = 1024; + +#if defined(__linux__) + char *content = NULL; + + content = read_file_to_str( + "/proc/sys/net/ipv4/ip_unprivileged_port_start", + 0, + NULL); + + if (content != NULL) { + int ok = 1; + uint16_t tmp_result; + + tmp_result = (uint16_t)tor_parse_long(content, 10, 0, 65535, &ok, NULL); + + if (ok) { + result = tmp_result; + } else { + fprintf(stderr, + "Unable to convert ip_unprivileged_port_start to integer: %s\n", + content); + } + } + + tor_free(content); +#endif /* defined(__linux__) */ + + return result; +} + #if !defined(_WIN32) + +#define PORT_TEST_RANGE_START 600 +#define PORT_TEST_RANGE_END 1024 + /* 0 on no, 1 on yes, -1 on failure. */ static int check_can_bind_low_ports(void) @@ -41,7 +81,7 @@ check_can_bind_low_ports(void) memset(&sin, 0, sizeof(sin)); sin.sin_family = AF_INET; - for (port = 600; port < 1024; ++port) { + for (port = PORT_TEST_RANGE_START; port < PORT_TEST_RANGE_END; ++port) { sin.sin_port = htons(port); tor_socket_t fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); if (! SOCKET_OK(fd)) { @@ -149,10 +189,24 @@ main(int argc, char **argv) /* Succeed if we can do a setuid with capability retention, and doing so * does not make us lose the ability to bind low ports */ { - int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); + const int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); okay = switch_id(username, keepcaps ? SWITCH_ID_KEEP_BINDLOW : 0) == 0; + if (okay) { - okay = check_can_bind_low_ports() == keepcaps; + /* Only run this check if there are ports we may not be able to bind + * to. */ + const uint16_t min_port = unprivileged_port_range_start(); + + if (min_port >= PORT_TEST_RANGE_START && + min_port < PORT_TEST_RANGE_END) { + okay = check_can_bind_low_ports() == keepcaps; + } else { + fprintf(stderr, + "Skipping check for whether we can bind to any " + "privileged ports as the user system seems to " + "allow us to bind to ports even without any " + "capabilities set.\n"); + } } break; }

1 0

[tor/maint-0.4.5] Merge branch 'maint-0.4.4' into maint-0.4.5
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 0a40892e8c376a3106cec1a4e9ba74f4dd146e68 Merge: ff1b24fb73 6578a3e865 Author: Alexander Færøy <ahf(a)torproject.org> Date: Fri Feb 5 16:05:57 2021 +0000 Merge branch 'maint-0.4.4' into maint-0.4.5 src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-)

1 0

[tor/maint-0.4.5] Merge branch 'tor-gitlab/mr/292_squashed' into maint-0.4.4
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 6578a3e8659f84152162b643acafacf43487a4a1 Merge: 2933c37188 67aefd5520 Author: Alexander Færøy <ahf(a)torproject.org> Date: Fri Feb 5 16:04:53 2021 +0000 Merge branch 'tor-gitlab/mr/292_squashed' into maint-0.4.4 src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-)

1 0

[tor/master] Merge branch 'tor-gitlab/mr/292_squashed' into maint-0.4.4
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 6578a3e8659f84152162b643acafacf43487a4a1 Merge: 2933c37188 67aefd5520 Author: Alexander Færøy <ahf(a)torproject.org> Date: Fri Feb 5 16:04:53 2021 +0000 Merge branch 'tor-gitlab/mr/292_squashed' into maint-0.4.4 src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-)

1 0

[tor/master] Only check for bindable ports if we are unsure if it will fail.
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 67aefd5520c7d9b3004ee25b860e5b54b3401188 Author: Alexander Færøy <ahf(a)torproject.org> Date: Thu Feb 4 23:11:11 2021 +0000 Only check for bindable ports if we are unsure if it will fail. We currently assume that the only way for Tor to listen on ports in the privileged port range (1 to 1023), on Linux, is if we are granted the NET_BIND_SERVICE capability. Today on Linux, it's possible to specify the beginning of the unprivileged port range using a sysctl configuration option. Docker (and thus the CI service Tor uses) recently changed this sysctl value to 0, which causes our tests to fail as they assume that we should NOT be able to bind to a privileged port *without* the NET_BIND_SERVICE capability. In this patch, we read the value of the sysctl value via the /proc/sys/ filesystem iff it's present, otherwise we assume the default unprivileged port range begins at port 1024. See: tor#40275 --- src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-) diff --git a/src/test/test_switch_id.c b/src/test/test_switch_id.c index baddf8d66e..91277e374f 100644 --- a/src/test/test_switch_id.c +++ b/src/test/test_switch_id.c @@ -31,7 +31,47 @@ static const struct { { NULL, 0 } }; +/* Returns the first port that we think we can bind to without special + * permissions. Usually this function returns 1024. */ +static uint16_t +unprivileged_port_range_start(void) +{ + uint16_t result = 1024; + +#if defined(__linux__) + char *content = NULL; + + content = read_file_to_str( + "/proc/sys/net/ipv4/ip_unprivileged_port_start", + 0, + NULL); + + if (content != NULL) { + int ok = 1; + uint16_t tmp_result; + + tmp_result = (uint16_t)tor_parse_long(content, 10, 0, 65535, &ok, NULL); + + if (ok) { + result = tmp_result; + } else { + fprintf(stderr, + "Unable to convert ip_unprivileged_port_start to integer: %s\n", + content); + } + } + + tor_free(content); +#endif /* defined(__linux__) */ + + return result; +} + #if !defined(_WIN32) + +#define PORT_TEST_RANGE_START 600 +#define PORT_TEST_RANGE_END 1024 + /* 0 on no, 1 on yes, -1 on failure. */ static int check_can_bind_low_ports(void) @@ -41,7 +81,7 @@ check_can_bind_low_ports(void) memset(&sin, 0, sizeof(sin)); sin.sin_family = AF_INET; - for (port = 600; port < 1024; ++port) { + for (port = PORT_TEST_RANGE_START; port < PORT_TEST_RANGE_END; ++port) { sin.sin_port = htons(port); tor_socket_t fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); if (! SOCKET_OK(fd)) { @@ -149,10 +189,24 @@ main(int argc, char **argv) /* Succeed if we can do a setuid with capability retention, and doing so * does not make us lose the ability to bind low ports */ { - int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); + const int keepcaps = (test_id == TEST_SETUID_KEEPCAPS); okay = switch_id(username, keepcaps ? SWITCH_ID_KEEP_BINDLOW : 0) == 0; + if (okay) { - okay = check_can_bind_low_ports() == keepcaps; + /* Only run this check if there are ports we may not be able to bind + * to. */ + const uint16_t min_port = unprivileged_port_range_start(); + + if (min_port >= PORT_TEST_RANGE_START && + min_port < PORT_TEST_RANGE_END) { + okay = check_can_bind_low_ports() == keepcaps; + } else { + fprintf(stderr, + "Skipping check for whether we can bind to any " + "privileged ports as the user system seems to " + "allow us to bind to ports even without any " + "capabilities set.\n"); + } } break; }

1 0

[tor/master] Merge branch 'maint-0.4.4' into maint-0.4.5
by ahf＠torproject.org 05 Feb '21

05 Feb '21

commit 0a40892e8c376a3106cec1a4e9ba74f4dd146e68 Merge: ff1b24fb73 6578a3e865 Author: Alexander Færøy <ahf(a)torproject.org> Date: Fri Feb 5 16:05:57 2021 +0000 Merge branch 'maint-0.4.4' into maint-0.4.5 src/test/test_switch_id.c | 60 ++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 57 insertions(+), 3 deletions(-)

1 0

[snowflake-webext/master] Filter out English language options
by arlo＠torproject.org 05 Feb '21

05 Feb '21

commit bbfe7445dd100c2db18c78bede05206a213cefb5 Author: Arlo Breault <abreault(a)wikimedia.org> Date: Thu Feb 4 17:02:40 2021 -0500 Filter out English language options On the next line 'en_US' is pushed unconditionally. Part of #12 We can always remove this if transifex is ever updated to stop producing these unnecessary translations. --- make.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make.js b/make.js index e00a88a..46857db 100755 --- a/make.js +++ b/make.js @@ -71,7 +71,7 @@ var getDisplayName = function(locale) { var getDirs = function() { let dirs = readdirSync('translation').filter((f) => { const s = statSync(`translation/${f}`); - return s.isDirectory() && !/^\./.test(f); + return s.isDirectory() && !/^(\.|en)/.test(f); }); dirs.push('en_US'); dirs.sort();

1 0

[snowflake-webext/master] Remove the duplication around availableLangs
by arlo＠torproject.org 05 Feb '21

05 Feb '21

commit 7dc400c32631d3f8058aaac19105fb32bd9dba51 Author: Arlo Breault <abreault(a)wikimedia.org> Date: Thu Feb 4 16:53:55 2021 -0500 Remove the duplication around availableLangs This consolidates it from either a Set or an object literal to just a Map in all cases. --- make.js | 17 ++++------------- static/index.js | 18 +++++++++--------- 2 files changed, 13 insertions(+), 22 deletions(-) diff --git a/make.js b/make.js index 1699e52..e00a88a 100755 --- a/make.js +++ b/make.js @@ -78,21 +78,12 @@ var getDirs = function() { return dirs; }; -var availableLangs = function() { - let out = "const availableLangs = new Set([\n"; - let dirs = getDirs(); - dirs = dirs.map(d => ` '${d}',`); - out += dirs.join("\n"); - out += "\n]);\n\n"; - return out; -}; - var translatedLangs = function() { - let out = "const availableLangs = {\n"; + let out = "const availableLangs = new Map([\n"; let dirs = getDirs(); - dirs = dirs.map(d => `'${d}': {"name": '${getDisplayName(d)}'},`); + dirs = dirs.map(d => `['${d}', '${getDisplayName(d)}'],`); out += dirs.join("\n"); - out += "\n};\n\n"; + out += "\n]);\n\n"; return out; }; @@ -165,7 +156,7 @@ task('build', 'build the snowflake proxy', function() { execSync(`cp -r ${STATIC}/ ${outDir}/`); addVersion(outDir); copyTranslations(outDir); - concatJS(outDir, 'badge', 'embed.js', availableLangs()); + concatJS(outDir, 'badge', 'embed.js', translatedLangs()); writeFileSync(`${outDir}/index.js`, translatedLangs(), 'utf8'); execSync(`cat ${STATIC}/index.js >> ${outDir}/index.js`); fillIndex(outDir); diff --git a/static/index.js b/static/index.js index 410fc1d..b296ae4 100644 --- a/static/index.js +++ b/static/index.js @@ -29,11 +29,11 @@ var getLang = function() { lang = override_lang; } - if (Object.prototype.hasOwnProperty.call(availableLangs, lang)) { + if (availableLangs.has(lang)) { return lang; } lang = lang.split('_')[0]; - if (Object.prototype.hasOwnProperty.call(availableLangs, lang)) { + if (availableLangs.has(lang)) { return lang; } return defaultLang; @@ -56,16 +56,16 @@ var fill = function(n, func) { } }; - -fetch(`./_locales/${getLang()}/messages.json`) +let gotLang = getLang(); +fetch(`./_locales/${gotLang}/messages.json`) .then((res) => { if (!res.ok) { return; } return res.json(); }) .then((json) => { var language = document.getElementById('language-switcher'); - var lang = `${getLang()}`; - language.innerText = availableLangs[lang].name + ' (' + lang + ')'; + var lang = `${gotLang}`; + language.innerText = `${availableLangs.get(lang)} (${lang})`; var messages = new Messages(json); fill(document.body, (m) => { return messages.getMessage(m); @@ -73,11 +73,11 @@ fetch(`./_locales/${getLang()}/messages.json`) }); // Populate language switcher list -for (var lang in availableLangs) { +availableLangs.forEach((name, lang) => { var languageList = document.getElementById('supported-languages'); var link = document.createElement('a'); link.setAttribute('href', '?lang='+lang); link.setAttribute('class', "dropdown-item"); - link.innerText = availableLangs[lang].name + ' (' + lang + ')'; + link.innerText = `${name} (${lang})`; languageList.lastChild.after(link); -} +});

1 0

[snowflake-webext/master] Emphasize the list of all projects
by arlo＠torproject.org 05 Feb '21

05 Feb '21

commit 5cd785acb58f1e469ea6b641950318c889c7d5ad Author: Arlo Breault <abreault(a)wikimedia.org> Date: Fri Feb 5 10:50:13 2021 -0500 Emphasize the list of all projects --- static/_locales/en_US/messages.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/_locales/en_US/messages.json b/static/_locales/en_US/messages.json index 8cda126..1acc793 100644 --- a/static/_locales/en_US/messages.json +++ b/static/_locales/en_US/messages.json @@ -63,7 +63,7 @@ "message": "If you encounter problems with Snowflake as a client or a proxy, please consider filing a bug report. There are two ways to file a bug report:" }, "sharedAccount": { - "message": "File an <a href=\"https://anonticket.onionize.space/\">anonymous ticket</a> by generating an identifier and logging in with it. Then, find the Snowflake project in the List of all projects and create a new issue." + "message": "File an <a href=\"https://anonticket.onionize.space/\">anonymous ticket</a> by generating an identifier and logging in with it. Then, find the Snowflake project in the <strong>List of all projects</strong> and create a new issue." }, "bugTracker": { "message": "<a href=\"https://gitlab.onionize.space/\">Request an account</a> at the Tor Project GitLab, then <a href=\"https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…">open a new issue</a> in the Snowflake project."

1 0

[snowflake-webext/master] Remove redundancy when updating homepage strings
by arlo＠torproject.org 05 Feb '21

05 Feb '21

commit b074f1c1dee12d29254fc5c2a92d17c4b3a81562 Author: Arlo Breault <abreault(a)wikimedia.org> Date: Thu Feb 4 13:27:10 2021 -0500 Remove redundancy when updating homepage strings --- make.js | 33 +++++++++++++++++++++++ package-lock.json | 8 +++++- package.json | 3 ++- static/_locales/en_US/messages.json | 5 +--- static/index.html | 52 +++++++++++-------------------------- 5 files changed, 58 insertions(+), 43 deletions(-) diff --git a/make.js b/make.js index 81a5b9b..1699e52 100755 --- a/make.js +++ b/make.js @@ -5,6 +5,7 @@ var { writeFileSync, readFileSync, readdirSync, statSync } = require('fs'); var { execSync, spawn } = require('child_process'); var cldr = require('cldr'); +var domino = require('domino'); // All files required. var FILES = [ @@ -94,6 +95,37 @@ var translatedLangs = function() { out += "\n};\n\n"; return out; }; + +// FIXME: This is duplicated from index.js and should be shared in some way +var fill = function(n, func) { + switch(n.nodeType) { + case 1: // Node.ELEMENT_NODE + { + const m = /^__MSG_([^_]*)__$/.exec(n.getAttribute('data-msgid')); + if (m) { + var val = func(m[1]); + if (val != undefined) { + n.innerHTML = val; + } + } + n.childNodes.forEach(c => fill(c, func)); + break; + } + } +}; + +var fillIndex = function(outDir) { + var indexFile = `${outDir}/index.html`; + var html = readFileSync(indexFile, 'utf8'); + var dom = domino.createDocument(html); + var locales = require(`./static/_locales/en_US/messages.json`); + fill(dom.body, function(m) { + return locales[m].message; + }); + html = dom.serialize(); + writeFileSync(indexFile, html, 'utf8'); +}; + var tasks = new Map(); var task = function(key, msg, func) { @@ -136,6 +168,7 @@ task('build', 'build the snowflake proxy', function() { concatJS(outDir, 'badge', 'embed.js', availableLangs()); writeFileSync(`${outDir}/index.js`, translatedLangs(), 'utf8'); execSync(`cat ${STATIC}/index.js >> ${outDir}/index.js`); + fillIndex(outDir); console.log('Snowflake prepared.'); }); diff --git a/package-lock.json b/package-lock.json index 06d86d5..2b07ee3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "snowflake-pt", - "version": "0.5.2", + "version": "0.5.3", "lockfileVersion": 1, "requires": true, "dependencies": { @@ -299,6 +299,12 @@ "webidl-conversions": "^4.0.2" } }, + "domino": { + "version": "2.1.6", + "resolved": "https://registry.npmjs.org/domino/-/domino-2.1.6.tgz", + "integrity": "sha512-3VdM/SXBZX2omc9JF9nOPCtDaYQ67BGp5CoLpIQlO2KCAPETs8TcDHacF26jXadGbvUteZzRTeos2fhID5+ucQ==", + "dev": true + }, "emoji-regex": { "version": "8.0.0", "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", diff --git a/package.json b/package.json index 2a28ca8..eccee94 100644 --- a/package.json +++ b/package.json @@ -23,6 +23,7 @@ "author": "Serene Han", "license": "BSD-3-Clause", "devDependencies": { + "domino": "^2.1.6", "eslint": "^6.0.1", "jasmine": "2.5.2" }, @@ -32,4 +33,4 @@ "ws": "^3.3.1", "xmlhttprequest": "^1.8.0" } -} \ No newline at end of file +} diff --git a/static/_locales/en_US/messages.json b/static/_locales/en_US/messages.json index 844aeff..8cda126 100644 --- a/static/_locales/en_US/messages.json +++ b/static/_locales/en_US/messages.json @@ -36,10 +36,7 @@ "message": "Cookies are not enabled." }, "websiteIntro": { - "message": "Snowflake is a system to defeat internet censorship. People who are censored can use Snowflake to access the internet. Their connection goes through Snowflake proxies, which are run by volunteers. For more detailed information about how Snowflake works see our <a href=\"https://trac.torproject.org/projects/tor/wiki/doc/Snowflake/\" data-msgid=\"__MSG_docWiki__\">documentation wiki</a>." - }, - "docWiki": { - "message": "documentation wiki" + "message": "Snowflake is a system to defeat internet censorship. People who are censored can use Snowflake to access the internet. Their connection goes through Snowflake proxies, which are run by volunteers. For more detailed information about how Snowflake works see our <a href=\"https://trac.torproject.org/projects/tor/wiki/doc/Snowflake/\">documentation wiki</a>." }, "browser": { "message": "Browser" diff --git a/static/index.html b/static/index.html index 4902c86..439574b 100644 --- a/static/index.html +++ b/static/index.html @@ -32,40 +32,31 @@ <p class="diagram"><img src="./snowflake-schematic.png" alt="Diagram" /></p> - <p data-msgid="__MSG_websiteIntro__">Snowflake is a system to defeat internet censorship. People who are - censored can use Snowflake to access the internet. Their connection goes - through Snowflake proxies, which are run by volunteers. For more detailed - information about how Snowflake works see our - <a href="https://trac.torproject.org/projects/tor/wiki/doc/Snowflake/" data-msgid="__MSG_docWiki__">documentation wiki</a>.</p> + <p data-msgid="__MSG_websiteIntro__"></p> <div class="sidebyside"> <section id="browser" class="browser"> - <h2 data-msgid="__MSG_browser__">Browser</h2> + <h2 data-msgid="__MSG_browser__"></h2> - <p data-msgid="__MSG_censoredUsers__">If your internet access is censored, you should download - <a href="https://www.torproject.org/download/">Tor Browser</a>.</p> + <p data-msgid="__MSG_censoredUsers__"></p> <p class="screenshot"><img src="./screenshot.png" alt="Tor Browser screenshot" /></p> </section> <section id="extension" class="extension"> - <h2 data-msgid="__MSG_extension__">Extension</h2> + <h2 data-msgid="__MSG_extension__"></h2> - <p data-msgid="__MSG_installExtension__">If your internet access is <strong>not</strong> censored, you should - consider installing the Snowflake extension to help users in censored - networks. There is no need to worry about which websites people are - accessing through your proxy. Their visible browsing IP address will - match their Tor exit node, not yours.</p> + <p data-msgid="__MSG_installExtension__"></p> <p class="addon"> <a href="https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/"> <img src="./200px-Firefox_logo.png" alt="Install in Firefox" height="100" /><br /> - <span data-msgid="MSG_installFirefox__">Install in Firefox</span> + <span data-msgid="__MSG_installFirefox__"></span> </a> <a href="https://chrome.google.com/webstore/detail/snowflake/mafpmfcccpbjnhfhjnllmma…"> <img src="./200px-Chrome_logo.png" alt="Install in Chrome" height="100" /><br /> - <span data-msgid="__MSG_installChrome__">Install in Chrome</span> + <span data-msgid="__MSG_installChrome__"></span> </a> </p> </section> @@ -73,39 +64,26 @@ </div> <section id="bugs"> - <h2 data-msgid="__MSG_reportingBugs__">Reporting Bugs</h2> + <h2 data-msgid="__MSG_reportingBugs__"></h2> - <p data-msgid="__MSG_fileBug__">If you encounter problems with Snowflake as a client or a proxy, - please consider filing a bug report. There are two ways to file a bug report:</p> + <p data-msgid="__MSG_fileBug__"></p> <ol> - <li data-msgid="__MSG_bugTracker__"> - <a href="https://gitlab.onionize.space/">Request an account</a> - at the Tor Project GitLab, then - <a href="https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…">open a new issue</a> - in the Snowflake project. - </li> - <li data-msgid="__MSG_sharedAccount__"> - File an - <a href="https://anonticket.onionize.space/">anonymous ticket</a> - by generating an identifier and logging in with it. Then, find the Snowflake project in the List of all projects and create a new issue. - </li> + <li data-msgid="__MSG_bugTracker__"></li> + <li data-msgid="__MSG_sharedAccount__"></li> </ol> - <p data-msgid="__MSG_descriptive__"> - Please try to be as descriptive as possible with your ticket and if - possible include log messages that will help us reproduce the bug. - </p> + <p data-msgid="__MSG_descriptive__"></p> </section> <section id="embed"> - <h2 data-msgid="__MSG_embed__">Embed</h2> + <h2 data-msgid="__MSG_embed__"></h2> - <p data-msgid="__MSG_possible__">It is now possible to embed the Snowflake badge on any website:</p> + <p data-msgid="__MSG_possible__"></p> <textarea readonly><iframe src="https://snowflake.torproject.org/embed.html" width="320" height="240" frameborder="0" scrolling="no"></iframe></textarea> - <p data-msgid="__MSG_looksLike__">Which looks like this:</p> + <p data-msgid="__MSG_looksLike__"></p> <iframe src="https://snowflake.torproject.org/embed.html" width="320" height="240" frameborder="0" scrolling="no"></iframe> </section>

1 0