[tor-bugs] #22530 [Webpages/Blog]: Tor Browser 7.0 can't post on https://blog.torproject.org unless security slider is lowered

[Tor Bug Tracker & Wiki]

#22530: Tor Browser 7.0 can't post on https://blog.torproject.org unless security
slider is lowered
---------------------------+--------------------------
 Reporter:  cypherpunks    |          Owner:  hiro
     Type:  defect         |         Status:  accepted
 Priority:  High           |      Milestone:
Component:  Webpages/Blog  |        Version:
 Severity:  Major          |     Resolution:
 Keywords:                 |  Actual Points:
Parent ID:                 |         Points:
 Reviewer:                 |        Sponsor:
---------------------------+--------------------------
Changes (by hiro):

 * status:  new => accepted


Comment:

 I have been investigating this a bit more. The status at the moment is the
 following.

 The template we are using implements bootstrap w some JS, when Tor browser
 is used w/ high security level, posting to the blog (comments and new blog
 posts for registered users) is not possible.

 This is part due to issues with tor-bootstrap template as well as issues
 with drupal admin template.

 I am trying to see if it is possible to solve the comment side of this
 issue, so that users would be allowed to post with high security level in
 Tor browser.

 To do this I am specifically trying to strip the problematic JS while I
 fix the other big and small design issues.

 The admin part is a bit more complicated to solve instead. I might have a
 look around to see if I can find a no-JS admin template. If not we should
 consider recoding the admin template ourselves, which might be a big
 effort.

 Unfortunately we have inherited this issue from the old tor labs contract
 and we are trying to adapt it to the blog.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22530#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online