project/web/donate, branch master

Set allowed origin header for onion hosts

2020-12-23T22:13:24+00:00

In order to let us use fetch with credentials (to send cookies), the
allowed origin needs to match the URL for the site using fetch. So if
the request is coming from an onion URL, then assume it's from the onion
donate site.

Limit matched amount in counter to first 100k donated

2020-12-11T22:20:51+00:00

Contributions beyond $100k in the campaign period are not matched, so
this limits the doubling logic to the appropriate amount and supplies
the correct amount in the JSON used by the donate page counter.

Issue #49798

Revert "Use wildcard for Access-Control-Allow-Origin"

2020-10-21T18:46:12+00:00

This reverts commit 9a7940ba9994789293b44c64632822cc849c918c.

This didn't work because then we get this error in the browser:

Access to fetch at
'https://donate-api.torproject.org/setExpressCheckout' from origin
'https://donate.torproject.org' has been blocked by CORS policy:
Response to preflight request doesn't pass access control check: The
value of the 'Access-Control-Allow-Origin' header in the response must
not be the wildcard '*' when the request's credentials mode is
'include'.

Use wildcard for Access-Control-Allow-Origin

2020-10-21T17:26:04+00:00

The newsletter site captcha isn't working because it needs this header
set to newsletter.torproject.org and this header doesn't allow multiple
origins. We'll just set it to wildcard for now and figure out if we can
do something else.

Use subscriptionErrorUrl instead of referrer

2020-10-21T17:22:35+00:00

Tor has Referrer-Policy: no-referrer on their live server, so we can't
use the referrer for going back to the page that sent the request.

Fixed Uncaught Exception Error: "Class 'Tor\Uri' not found"

2020-10-02T23:03:04+00:00

Forgot to checkin a file.

Fixed notice with reset in subscription-request

2020-10-02T21:46:22+00:00

reset takes a reference, so we can't just pass the result of a function.

Issue #48283

Allow cryptocurrency thank you redirect to adopt localOptions

2020-09-30T18:49:09+00:00

Part of porting the site to lektor site, cryptocurrency page
is going to be on the lektor site. To allow flexibility of
where people are going to be redirected after the submission,
this code is put into place. key pair 'cryptocurrencyThankyouUrl'
=> '/cryptocurrency/thank-you' needs to be added in $localOptions
in private/settings.local.php on the donate server for local
settings.

Issue #48280

Added Lektor error pages for Civi mailing links

2020-09-28T23:33:52+00:00

If a user clicks on a link like an optout or unsubscribe link in a
CiviCRM mailing and then there's some issue with the unsubscribe, we
need to show them some errors, so we need to send them back to the
lektor site because we aren't going to have any display pages on the
donate site once the Lektor pages go live.

Issue #48285

Changes to handle subscriptions from lektor

2020-09-26T00:29:03+00:00

This lets Lektor handle the subscription forms and get back error
messages and get redirected back to the correct pages.

Issue #48283