search

CTemplar / webclient

Angular webclient (with Linux, macOS and Windows desktop clients) for CTemplar's encrypted email service.
https://ctemplar.com
Apache License 2.0
105 stars 28 forks source link

Onion site redirects to clearnet website. #1557

Closed Vepnar closed 2 years ago

Vepnar commented 2 years ago

Your environment

Browser: Version 1.26.74 Chromium: 91.0.4472.124 (Official Build) (64-bit) Operating system: x86_64 Linux

Steps to reproduce

  1. Open the onion website http://ctemplarpizuduxk3fkwrieizstx33kg5chlvrh37nz73pv5smsvl6ad.onion/
  2. Press the login button (Person with lock)
  3. Get redirected to the clearnet version of the website https://mail.ctemplar.com/mail/inbox/page/1

Expected behavior

I expect to get redirected to the onion version of the mail client.

Actual behavior

I get redirected to the clearnet version of the mail client.

The-Hidden-Hand commented 2 years ago

@Vepnar We had to disable the Onion address because the Tor Browser is having recurring issues with the CORS as it is sending null in the Origin header of the request and it fails the check. We have notified their development team a month ago. Unfortunately we cannot do anything at this point. We also tried to accept null string value in the Allow header as a patch without success.

Related: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32865