[tor-bugs] #23324 [Applications/Tor Browser]: Tor Browser can't render nationalgeographic.com pages on security level high (was: Tor Browser can't render nationalgeographic.com pages)

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Aug 25 10:34:41 UTC 2017


#23324: Tor Browser can't render nationalgeographic.com pages on security level
high
--------------------------------------+---------------------------
 Reporter:  l0b0                      |          Owner:  jsha
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  not a bug
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+---------------------------
Changes (by gk):

 * status:  needs_information => closed
 * component:  HTTPS Everywhere/EFF-HTTPS Everywhere => Applications/Tor
     Browser
 * resolution:   => not a bug


Comment:

 Replying to [comment:5 l0b0]:
 > After reverting back to default extensions (HTTPS Everywhere, NoScript,
 Torbutton, TorLauncher), loading http://www.nationalgeographic.com/ and
 allowing all JavaScript there, I still get just a blank page.
 >
 > I'm on up-to-date Arch Linux.
 >
 > I get no console messages whatsoever during a hard refresh of
 http://www.nationalgeographic.com/.
 >
 > The security level is set to "High". Setting it to "Medium" works around
 the issue. This is strange, since according to the security slider window
 the only changes applied are that SVG images are disabled and website-
 provided fonts are blocked. Neither of these should be necessary to render
 the page in its entirety. For example, the banner image is not at any
 level inside an SVG element.

 Okay, the HTTPS Everywhere related error was due to a slightly outdated
 extension version (I did not update it after extracting a clean 7.0.4).
 And, yes, allowing SVG content allows the page to render properly. I guess
 what is happening is that the site is trying to load some SVG stuff very
 early and stops then not rendering other elements that are not SVG
 dependent. Anyway, nothing we can do about it.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23324#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list