[tor-bugs] #20249 [Applications/Tor Browser]: Captcha not displaying on hidden service mirror of bridges.torproject.org

[Tor Bug Tracker & Wiki]

#20249: Captcha not displaying on hidden service mirror of bridges.torproject.org
--------------------------------------+----------------------
 Reporter:  cypherpunks               |          Owner:  isis
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  bridgedb-reportbug        |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------

Comment (by isis):

 Replying to [comment:3 weasel]:
 > So, should we get rid of
 >         Header set Content-Security-Policy: "default-src 'self';"

 I think(?) if we remove that, then the images (when requesting the Hidden
 Service) will instead come from https://bridges.torproject.org. We could
 try changing it to:

 {{{
         Header set Content-Security-Policy: "default-src 'self'; img-src
 'self' data:;"
 }}}

 That might work? It's probably getting tripped up on the data: URL.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20249#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online