So I'm hosting a website, but I'm having a problem, Some functions don't work when using Tor Browser at the Safest security level, but they work fine on the Standard level. Can anyone help? hoefrvcvziqdaovyjgpen5d2coxzocoobq4didbjqhb4jonfwtrlsbid.onion If you're curious, it's a research site for my academic studies.
pirate, the safest level disables javascript that is probably your problem any onion site that requires javascript i wouldn't get on it
The risk of javascript on the clearnet is greater than the risk of javascript on the official Tor browser. If you wouldn't get on "any onion site that requires javascript", then you should really avoid javascript on any browser with less restrictions, including on clearnet sites.
bro, you can't rely on js for a hidden service if you want to support safest mode. your site is an spa, so without js it can't fetch data or even navigate.
plus, you're leaking way too much backend logic in your client scripts. I can see admin checks and sensitive endpoints right in the source code. that stuff should never reach the browser.
plus, you're leaking way too much backend logic in your client scripts. I can see admin checks and sensitive endpoints right in the source code. that stuff should never reach the browser.
This is because when security settings are set to "safest' Javascript is disabled. Anytime you use the Tor application security settings should ALWAYS be set to safest as client side Javascript opens you up to countless vulnerabilities that can lead to your de-anonymization. Wether you are an average joe, market admin, vendor, buyer developer, no matter what you should never allow Javascript while using Tor. In my personal opinion Tor browser devs should remove security settings altogether, or atleast default to the "safest" setting always.
~BazaarMan
~BazaarMan