[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security concerns with minified javascript code



> Sure, you can proofread a 30k-line configure script without a
> problem. So, the condition is now "must be generated from source only if
> the generated from is hard-but-not-impossible to read".

Several times over the last year I have modified the output form of
autoconf directly when doing minor modifications, such as including
or excluding a file. For that reason, I don't see much of a problem with
automatically generated CSS being included in Debian.

However, point taken - the output of autoconf is too hard to proofread,
especially when it can be generated from source.

> I would also like to stress that all this stuff is DFSG-compliant.

Doesn't the DFSG require source code, as well as a free license?

Attachment: pgp8bWxqM47wi.pgp
Description: PGP signature


Reply to: