Opened 3 years ago

Last modified 13 months ago

#18773 new defect

JS errors in Blog

Reported by: bugzilla Owned by:
Priority: Medium Milestone:
Component: Webpages/Blog Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When loading a blog post:

Error: call to eval() blocked by CSP jquery.js:2:0
ReferenceError: $ is not defined drupal.js:205:2
ReferenceError: $ is not defined textarea.js:35:2

and

Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://blog.torproject.org 'sha256-dOEkAci/oPxf5KnvZSDGW6/1gs5qvj7uG++2KYd+qd4='"). jquery.js:2:0

Child Tickets

Change History (3)

comment:1 Changed 3 years ago by 0xcoffee

The offending file is at ​https://blog.torproject.org/misc/jquery.js

The way it was minified seems to require the use of eval(), I think fixing this would require using a different bundle.

Curiously; it's dated 2006/12/23 21:46:35, and jquery.js v1.6, but jQuery 1.6 wasn't released until 2011 ​https://blog.jquery.com/2011/05/03/jquery-16-released/.

I'm unsure which jQuery version would be a suitable replacement, but my gut feeling is that it isn't 1.6.

comment:2 Changed 13 months ago by traumschule

Component: Internal Services/Blog → Webpages/Blog

(#22384)

comment:3 Changed 13 months ago by traumschule

in case jquery gets updated, please let #17393 know.

Note: See TracTickets for help on using tickets.