Donations not working

Donations are not working from the Tor Browser but also from Firefox. I believe this is mission-critical and should be payed attention to.

What happened:

  • everything loaded well
  • selected 5€
  • typed credit email, card, ccv, expiration date
  • then I clicked on the big “DONATE” button and nothing happened

From Tor browser

  • Tor Browser version: 11.0.1
  • OS: Whonix

Browser’s console: Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369 Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369 Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369 Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231 Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369 Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434 Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494 Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”). 6 Content Security Policy: The page’s settings observed the loading of a resource at data: (“default-src”). A CSP report is being sent. Blocked third party https://m.stripe.network/inner.html#url=https%3A%2F%2Fdonate.torproject.org%2F&title=Tor%20Project%20%7C%20Donate&referrer=&muid=[CENSORED]&version=6&preview=false from extracting canvas data.

Firefox

  • no extensions
  • version: 78.15.0esr
  • OS: Linux / Debian
Browser's console `Source map error: Error: request failed with status 404
Resource URL: https://donate.torproject.org/static/gen/donate.js?h=84faa3f2
Source Map URL: assets/donate.js.map
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172434
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Source map error: Error: request failed with status 404
Resource URL: https://donate.torproject.org/static/gen/donate.js?h=84faa3f2
Source Map URL: assets/donate.js.map

Sorry about that. We have it here as a bug to fix Donations failing on Tor Browser when using Stripe [user reported] (#42) · Issues · The Tor Project / Web / Donate Static · GitLab

2 Likes

Are you using a VPN or a proxy?

On firefox yes. A VPN.

Could you disable your VPN and try again?

Done. To clarify. I’m having issues with Tor Browser (not through the VPN)

And also on Firefox. For firefox I disabled the VPN and (just in case) opened on a fresh firefox profile.

When I open the page it gives me these errors:

Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172438
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172438
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172438
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494

and then when I click on “DONATE” nothing happens.

Hi @adrenus! Could you confirm whether you’re attempting to donate via donate.torproject.org, or the onion site (https://yoaenchicimox2qdc47p36zm3cuclq7s7qxx6kvxqaxjodigfifljqqd.onion/index.html) in Tor Browser? Thanks!

Tested now on a freshly downloaded Tor Browser (11.0.1) from torproject.org connecting over a VPN.
This time, the donate form doesn’t even show:

When loading the page, this is what I see in the errors in the browser console.

GEThttps://www.paypal.com/sdk/js?client-id=AbzwWJgUgwGMvTupfvigx1yAj75jNnCj4mFGC_VbiROUi2TfVwPS9IZ5MfqLsSUnXJFSMwaSaTR4FY_A&vault=true
[HTTP/2 403 Forbidden 213ms]

Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Loading failed for the <script> with source “https://www.paypal.com/sdk/js?client-id=AbzwWJgUgwGMvTupfvigx1yAj75jNnCj4mFGC_VbiROUi2TfVwPS9IZ5MfqLsSUnXJFSMwaSaTR4FY_A&vault=true”. donate.torproject.org:122:1
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
ReferenceError: paypal is not defined
    c https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:775
    _o https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    hi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Gi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Yi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ki https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Vi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ri https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ss https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Wi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    render https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Focm https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:957
    f https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
    parcelRequire https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
    <anonymous> https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
donate.js:769:82872
Uncaught ReferenceError: paypal is not defined
    c https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:775
    _o https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    hi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Gi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Yi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ki https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Vi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ri https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ss https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Wi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    render https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
    Focm https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:957
    f https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
    parcelRequire https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
    <anonymous> https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
donate.js:775:979
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Source map error: Error: request failed with status 404
Resource URL: https://donate.torproject.org/static/gen/donate.js?h=84faa3f2
Source Map URL: assets/donate.js.map

Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings observed the loading of a resource at data: (“default-src”). A CSP report is being sent.
Blocked third party https://m.stripe.network/inner.html#url=https%3A%2F%2Fdonate.torproject.org%2F&title=Tor%20Project%20%7C%20Donate&referrer=&muid=db6d4ee3-85bd-416e-8272-527411c52f50f645b8&sid=78e0d85a-03a0-42b8-9e5a-18a7f85dca4a9c36d6&version=6&preview=false from extracting canvas data.

After having tested in three different browsers (Whonix, Tor, Firefox w/ VPN, Firefox no VPN) this must surely be an issue with the page itself. And I’m sure someone will be able to reproduce. Otherwise, these is something seriously wrong with my computers.

Note When testing with the Tor Browser downloaded just now, I see some strange characters. But I believe that to be another unrelated bug:

!error2|690x78

I was using donate.torproject.org but tried now on the onion and it also failed. Actually, I can see the following error as soon as I load the page. So no need to even fill out payment details. Maybe you can test it yourselves to see if it’s reproducible.

Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172438
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”). 2
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”). 2
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings observed the loading of a resource at data: (“default-src”). A CSP report is being sent.
Blocked third party https://m.stripe.network/inner.html#url=https%3A%2F%2Fdonate.torproject.org%2F&title=Tor%20Project%20%7C%20Donate&referrer=&muid=NA&sid=NA&version=6&preview=false from extracting canvas data. out-4.5.41.js:1:26592

Thanks @adrenus! There are a couple of known issues with the current donate page:

  • The form doesn’t work on Safest mode in Tor Browser due to JS being blocked
  • Donations via Stripe (i.e. Credit Card) “hang” when submitted via the onion site

However given your experience it definitely seems like something else is going on here too. We haven’t been able to reproduce the bug reliably yet (both Firefox and Tor Browser donations are going through for me), but we’ve heard similar reports from other donors having difficulty with Stripe as well – so you’re not alone!

1 Like

What’s your Firefox version?

Yes. It’s weird and potentially also the source of something bigger. If websites behave differently on Tor Browsers on the same version, if identified this behavior could be exploited to fingerprint those users.

It’s this one:

Hi, thanks for reporting this issue!
We’ll track the issue here and here.

2 Likes