Canvas is blocked by browser because of privacy reasons (possible by an extension or browser setting). Canvas is used to generate the QR. Privacy-first solution what a developer should do is generate the image on the server and serve it to the frontend. So I actually agree with blocking the canvas. Otherwise, why you're using Tor for...

Is there another way to do what you want to do?