Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Trac
Trac
  • Project overview
    • Project overview
    • Details
    • Activity
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Operations
    • Operations
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Create a new issue
  • Issue Boards

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • Legacy
  • TracTrac
  • Issues
  • #28791

Closed (moved)
Open
Opened Dec 09, 2018 by Trac@tracbot

Tor Browser 8 cannot download images protected by basic auth

TB seems to ignore authentication credentials when trying to download images from .onion sites protected by basic http authorization. The "Authorization: Basic" header is missing, and the site returns 401 Authorization Required.

To reproduce this error:

  1. Setup an nginx server with some test dummy config and some login:password pair generated by openssl passwd in htpasswd:

    root /var/www/html;

    server_name _; location / { auth_basic "closed site"; auth_basic_user_file htpasswd; }

  2. Put a test .png or .jpg file into /var/www/html

  3. Try to access the file at http://.onion/test.png

  4. Enter login and password when prompted - check that the file displays properly.

  5. Now try to download the file (Ctrl+S) and get a 401 error.

If the server doesn't provide a text response for the 401 error, TB will simply create an empty file.

Trac:
Username: pf.team

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: legacy/trac#28791