Opened 4 years ago
Last modified 15 months ago
#18773 new defect
JS errors in Blog
Reported by: | bugzilla | Owned by: | |
---|---|---|---|
Priority: | Medium | Milestone: | |
Component: | Webpages/Blog | Version: | |
Severity: | Normal | Keywords: | |
Cc: | Actual Points: | ||
Parent ID: | Points: | ||
Reviewer: | Sponsor: |
Description
When loading a blog post:
Error: call to eval() blocked by CSP jquery.js:2:0 ReferenceError: $ is not defined drupal.js:205:2 ReferenceError: $ is not defined textarea.js:35:2
and
Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://blog.torproject.org 'sha256-dOEkAci/oPxf5KnvZSDGW6/1gs5qvj7uG++2KYd+qd4='"). jquery.js:2:0
Child Tickets
Note: See
TracTickets for help on using
tickets.
The offending file is at https://blog.torproject.org/misc/jquery.js
The way it was minified seems to require the use of eval(), I think fixing this would require using a different bundle.
Curiously; it's dated 2006/12/23 21:46:35, and jquery.js v1.6, but jQuery 1.6 wasn't released until 2011 https://blog.jquery.com/2011/05/03/jquery-16-released/.
I'm unsure which jQuery version would be a suitable replacement, but my gut feeling is that it isn't 1.6.