[tor-bugs] #6056 [Website]: We give amazon and google a web bug on our donate page, and the amazon one is http

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon Jun 4 18:12:58 UTC 2012


#6056: We give amazon and google a web bug on our donate page, and the amazon one
is http
---------------------+------------------------------------------------------
 Reporter:  arma     |          Owner:  phobos
     Type:  defect   |         Status:  new   
 Priority:  normal   |      Milestone:        
Component:  Website  |        Version:        
 Keywords:           |         Parent:        
   Points:           |   Actualpoints:        
---------------------+------------------------------------------------------

Comment(by arma):

 Replying to [comment:1 phobos]:
 > The payments won't work without the hotlink to their sites. We spent too
 long trying to figure it out. The official answer from both is that the
 client needs to be served a unique identifier which ties torproject.org to
 their payment system or it won't work. When you don't have the identifier,
 the user is told it is an invalid cart with Amazon or an empty cart with
 Google.

 Does the hotlink include the image load? I don't see a cookie or anything
 from loading the images. What is the identifier?

 > Also, amazon/google/paypal should be serving over https.

 I agree.

 >I don't get a mixed-content warning and the requests all appear to be
 https:// for me.

 {{{
                     <div>
                      <label for="amazon">&#x24;</label>
                      <input type="text" name="amount" size="6" value="20">
                           <input class="donate-btn" type="image"
 src="http://g-ecx.images-
 amazon.com/images/G/01/asp/golden_small_donate_withmsg_whitebg.gif">
                     </div>
 }}}

 Our donate.wml very clearly loads the http version. Is it possible you
 have some rewrite rule in your https-everywhere?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6056#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list