Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
T
Tor Browser
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,527
    • Issues 1,527
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 0
    • Merge Requests 0
  • Operations
    • Operations
    • Incidents
  • Analytics
    • Analytics
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • The Tor Project
  • Applications
  • Tor Browser
  • Issues
  • #28791

Closed
Open
Opened Dec 09, 2018 by Trac@tracbot

Tor Browser 8 cannot download images protected by basic auth

TB seems to ignore authentication credentials when trying to download images from .onion sites protected by basic http authorization. The "Authorization: Basic" header is missing, and the site returns 401 Authorization Required.

To reproduce this error:

  1. Setup an nginx server with some test dummy config and some login:password pair generated by openssl passwd in htpasswd:

    root /var/www/html;

    server_name _; location / { auth_basic "closed site"; auth_basic_user_file htpasswd; }

  2. Put a test .png or .jpg file into /var/www/html

  3. Try to access the file at http://.onion/test.png

  4. Enter login and password when prompted - check that the file displays properly.

  5. Now try to download the file (Ctrl+S) and get a 401 error.

If the server doesn't provide a text response for the 401 error, TB will simply create an empty file.

Trac:
Username: pf.team

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: tpo/applications/tor-browser#28791