Sunday, April 17, 2016

Fwd: Please make your JavaScript free

List of blocked JavaScript in https://start.fedoraproject.org/

  • Whitelist
    This script is detected as inline, nonfree, defining functions or methods, and the rest of the page as loading external scripts
    /* This list is generated, don't edit here */ $(function() { $( '.uls-trigger' ).uls( { onSelect : function( language ) { var languageName = $.uls.data.getAutonym( language ); $( '.uls-trigger' ).text( languageName ); $('#selectedLang').val(language); $('#langSelect').trigger('submit'); }, languages: { 'en' : 'English' , 'af': 'Afrikaans', 'ar': 'عربي', 'as': 'অসমীয়া', 'ast': 'Asturianu', 'bal': 'بلوچی', 'bg': 'български език', 'bn': 'বাংলা', 'bn_IN': 'বাংলা (ভারত)', 'br': 'Brezhoneg', 'ca': 'Català', 'cs': 'česky', 'da': 'dansk', 'de': 'Deutsch', 'de_CH': 'Schwyzerdütsch', 'el': 'Ελληνικά', 'en': 'English', 'en_GB': 'English (UK)', 'es': 'Español', 'eu': 'euskera', 'fa': 'پارسی', 'fi': 'suomi', 'fr': 'Français', 'gl': 'galego', 'gu': 'ગુજરાતી', 'he': 'עברית', 'hi': 'हिन्दी', 'hu': 'Magyar', 'ia': 'Interlingua', 'id': 'Indonesia', 'is': 'Íslenska', 'it': 'Italiano', 'ja': '日本語', 'ka': 'ქართული', 'kn': 'ಕನ್ನಡ', 'ko':…
  • WhitelistNONTRIVIAL: eval has been found in code
    https://start.fedoraproject.org/static/js/bootstrap.min.js
  • WhitelistNONTRIVIAL: Creates an xhr object
    https://start.fedoraproject.org/static/js/jquery.min.js

List of accepted JavaScript in https://start.fedoraproject.org/

  • LibreJS did not allow the execution of any scripts on this page: '
    • There may be no scripts on this page (check source, C-u)
    • The inline and on-page JavaScript code may not be free and/or may not have proper license information and external scripts (if present) may have been removed by default.
    • External scripts may not be free and/or may not have proper licensing and are not part of the whitelist of free JavaScript libraries.

    OK I got an email of how the report was generated and what site it was
    from. This looks to be a needing an inline under a floss license thing
    (or something).

    ---------- Forwarded message ----------
    From: John M. Harris, Jr. <johnmh@openmailbox.org>
    Date: 17 April 2016 at 10:31
    Subject: Re: Please make your JavaScript free
    To: Stephen John Smoogen <smooge@gmail.com>


    On Sun, 2016-04-17 at 10:18 -0600, Stephen John Smoogen wrote:
    > 1) We have dozens of websites so telling us which one you found a
    > problem with would be useful.
    > 2) We have all our javascript under GPL or MIT licenses that we know
    > of. If something crept in we need to know about it.
    > 3) Please cite exactly where you found the non-free Javascript and
    > how
    > you found it (in case it is a false positive )
    >
    > On 15 April 2016 at 15:34, John M. Harris, Jr. <johnmh@openmailbox.or
    > g> wrote:
    > >
    > > I could not use your site because it requires running JavaScript
    > > code
    > > which is not free software. Since a nonfree program disrespects
    > > the
    > > user's freedom, I decided not to run it.
    > >
    > > See http://gnu.org/philosophy/javascript-trap.html for more
    > > information, and please make your JavaScript code free.
    > > --
    > > websites mailing list
    > > websites@lists.fedoraproject.org
    > > http://lists.fedoraproject.org/admin/lists/websites@lists.fedorapro
    > > ject.org
    >
    >

    I'm sorry that I didn't attach a full report. The LibreJS extension
    should definitely generate a more verbose email. Here is a full report
    for start.fedoraproject.org


    --
    Stephen J Smoogen.

    No comments:

    Post a Comment