When loading the page, this is what I see in the errors in the browser console.
GEThttps://www.paypal.com/sdk/js?client-id=AbzwWJgUgwGMvTupfvigx1yAj75jNnCj4mFGC_VbiROUi2TfVwPS9IZ5MfqLsSUnXJFSMwaSaTR4FY_A&vault=true
[HTTP/2 403 Forbidden 213ms]
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Loading failed for the <script> with source “https://www.paypal.com/sdk/js?client-id=AbzwWJgUgwGMvTupfvigx1yAj75jNnCj4mFGC_VbiROUi2TfVwPS9IZ5MfqLsSUnXJFSMwaSaTR4FY_A&vault=true”. donate.torproject.org:122:1
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65231
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
ReferenceError: paypal is not defined
c https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:775
_o https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
hi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Gi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Yi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ki https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Vi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ri https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ss https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Wi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
render https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Focm https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:957
f https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
parcelRequire https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
<anonymous> https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
donate.js:769:82872
Uncaught ReferenceError: paypal is not defined
c https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:775
_o https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
hi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Gi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Yi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ki https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Vi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ri https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ss https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Wi https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Ls https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
render https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:769
Focm https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:957
f https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
parcelRequire https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
<anonymous> https://donate.torproject.org/static/gen/donate.js?h=84faa3f2:1
donate.js:775:979
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Source map error: Error: request failed with status 404
Resource URL: https://donate.torproject.org/static/gen/donate.js?h=84faa3f2
Source Map URL: assets/donate.js.map
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings observed the loading of a resource at data: (“default-src”). A CSP report is being sent.
Blocked third party https://m.stripe.network/inner.html#url=https%3A%2F%2Fdonate.torproject.org%2F&title=Tor%20Project%20%7C%20Donate&referrer=&muid=db6d4ee3-85bd-416e-8272-527411c52f50f645b8&sid=78e0d85a-03a0-42b8-9e5a-18a7f85dca4a9c36d6&version=6&preview=false from extracting canvas data.
After having tested in three different browsers (Whonix, Tor, Firefox w/ VPN, Firefox no VPN) this must surely be an issue with the page itself. And I’m sure someone will be able to reproduce. Otherwise, these is something seriously wrong with my computers.
Note When testing with the Tor Browser downloaded just now, I see some strange characters. But I believe that to be another unrelated bug:
I was using donate.torproject.org but tried now on the onion and it also failed. Actually, I can see the following error as soon as I load the page. So no need to even fill out payment details. Maybe you can test it yourselves to see if it’s reproducible.
Feature Policy: Skipping unsupported feature name “payment”. v3:1:65369
Feature Policy: Skipping unsupported feature name “payment”. v3:1:172438
Feature Policy: Skipping unsupported feature name “payment”. v3:1:64494
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”). 2
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”). 2
Content Security Policy: The page’s settings blocked the loading of a resource at data: (“media-src”).
Content Security Policy: The page’s settings observed the loading of a resource at data: (“default-src”). A CSP report is being sent.
Blocked third party https://m.stripe.network/inner.html#url=https%3A%2F%2Fdonate.torproject.org%2F&title=Tor%20Project%20%7C%20Donate&referrer=&muid=NA&sid=NA&version=6&preview=false from extracting canvas data. out-4.5.41.js:1:26592
Thanks @adrenus! There are a couple of known issues with the current donate page:
The form doesn’t work on Safest mode in Tor Browser due to JS being blocked
Donations via Stripe (i.e. Credit Card) “hang” when submitted via the onion site
However given your experience it definitely seems like something else is going on here too. We haven’t been able to reproduce the bug reliably yet (both Firefox and Tor Browser donations are going through for me), but we’ve heard similar reports from other donors having difficulty with Stripe as well – so you’re not alone!
Yes. It’s weird and potentially also the source of something bigger. If websites behave differently on Tor Browsers on the same version, if identified this behavior could be exploited to fingerprint those users.