Skip to content

GitLab

Trac
Trac

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

Closed (moved)
Opened by Georg Koppen@gk

Clicking on embedded links seems to cause FPI mismatch

Starting with Tor Browser 8 if one clicks on a link to, say, an image on a different domain, one sees first Torbutton log output about a request to the old domain in the URL bar and then to the new one. For instance if one clicks on the image link on

https://people.torproject.org/~gk/tests/image_pdf_fpi.html

the result is something like

[12-04 09:21:38] Torbutton INFO: tor SOCKS: https://www.w3schools.com/html/img_logo.gif via
                       torproject.org:b1e105e74a9fc3a64a2ce2ac582c0640
[12-04 09:21:38] Torbutton INFO: tor SOCKS: https://www.w3schools.com/html/img_logo.gif via
                       w3schools.com:81afd299054bcc8fc31c931087161bfe
GET https://www.w3schools.com/html/img_logo.gif 
[HTTP/2.0 200 OK 1787ms]

Note, there is only one GET request actually issued which could be a hint for a similar logging-only issue like #18762 (moved) and #16324 (moved).

This got noted on our blog: https://blog.torproject.org/comment/278684#comment-278684 (and similar comments on the 8.5a5 blog post).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information