search

globaleaks / whistleblowing-software

GlobaLeaks is free, open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
https://www.globaleaks.org
Other
1.22k stars 268 forks source link

GlobaLeaks does not work with Orweb from Mobile because Javascript is disabled #1189

Closed fpietrosanti closed 8 years ago

fpietrosanti commented 9 years ago

GlobaLeaks does not work with Orweb from mobile because Javascript is disabled.

The user see the following error: nojs

Once the user go in the Preferences and click "Enable Javascript" he will see the interface: yesjs

This ticket is to detect that a user is coming from Orweb and have Javascript disabled, providing graphical screenshots guidance/instructions on how to enable it .

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

fpietrosanti commented 9 years ago

@n8fr8 we have this problem with Orweb, is it possible to detect client-side that a user is running Orweb with Javascript disabled?

fpietrosanti commented 9 years ago

Below settings with JS disabled by default: js-disabled

Below settings with JS manually enabled: js-enabled

With the previously uploaded screenshots we can improve the default page explaining that JS is disabled, with step-by-step guide to enable it on Orweb.

n8fr8 commented 9 years ago

I like the guide you have created. That said, I am not sure what you are specifically asking us to do with Orweb?

Otherwise, we are working away on getting Orfox/TB "Mini" out, so that will be the new preferred browser for people to use.

fpietrosanti commented 9 years ago

@n8fr8 It's a question: There's a way to fingerprint a user coming from Orweb, that have Javascript disabled by default, in order to provide visual instructions on how to enable it?

Because we got feedback from LeMonde in France that users complain that GlobaLeaks does not work with "Orweb" (Because Javascript is disabled), so we'd love to provide visual instructions on how to enable it. But to do it, we need to "detect" that a user is using (Orweb && Javascript is disabled)!

evilaliv3 commented 8 years ago

this could be probably closed as orweb does not provide fingerprinting capabilities (and i think so of orfox); i hthink the guide we have is enough.

comradekingu commented 8 years ago

Orweb is deprecated in favour of orfox https://guardianproject.info/2015/06/30/orfox-aspiring-to-bring-tor-browser-to-android/

None of them sends a specific user-agent, unless you request the mobile site. A multiple choice guide when JavaScript fails might be the best solution.