[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#876241: debian-policy: Produce HTML output that doesn't try to load any JavaScript



Sean Whitton <spwhitton@spwhitton.name> writes:

> Per the discussion in #871944, at least for now we intend the version of
> Policy published on www.debian.org to be free of JavaScript.  So we need
> to include a JavaScript-free version in our package.

For what it's worth, I feel like avoiding Javascript here is excessively
conservative.  I'd prefer one of the solutions that pulls the Javascript
from the current Debian unstable packages.  Given the small use that
Sphinx makes of it, I find it unlikely that there will be any practical
security issues with this.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>


Reply to: