onionshare / onionshare-website

Source code for the OnionShare website

OnionShare Website

This is the code that powers https://onionshare.org/. It's licensed under AGPLv3.

It is static HTML.

Privacy Goals for Contributors

In order to protect the privacy of website visitors, and to prevent attacks that could lead to someone downloading a malicious binary, I want to make sure that:

• The website works, and binaries can be downloaded, without javascript. Users who block javascript should be fully supported. However, using javascript to make the website even more usable for those that allow it is fine.
• There aren't any third party resources included. When someone visits https://onionshare.org/, their browser shouldn't make any requests to any other domain names (including Google to load fonts, jquery, etc.).

onionshare-website's Issues

Make an onion service version of the website

From onionshare/onionshare#338:

I think it would be great to have the website at onionshare.org also available via a x.onion tor-website (replicated hidden service) - setting up such a hidden-service to offer a .onion site isn't that hard for someone understanding how Tor works.

This is obviously nothing urgent or really important - but nonetheless it's a real nice to have to help spreading the word about Tor's capabilities and to promote Tor through people seeing and using real useful sites 'within' Tor.

You make third-party requests

In your Readme you state:

• There aren't any third party resources included. When someone visits https://onionshare.org/, their browser shouldn't make any requests to any other domain names (including Google to load fonts, jquery, etc.).

However you violate your own principle with this Piwik tracking:

website - "De-Googled Android" link should point to F-Droid not (still) Google

🙄

[UI change]: Fix mobile view Menu

Issue :

• The website's mobile view menu is not full width rather, a less than half floating window which doesn't look very good.
  
• It can be fixed by making it full screen and adding some shadow to keep the perspective.

Wrong character encoding