There's tool sweep underway to make sure as many tools meet a minimum standard.
One such standard is to ensure no tool loads external resource (e.g. JavaScript/CSS from Google CDN)
The wmtran loads an external JavaScript resource(ie jquery).
This violates Toolforge's Content Security Policy.
Kindly address this issue.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions | |||
| Open | None | T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses | |||
| Open | None | T172065 Hunt for Toolforge tools that load resources from third party sites | |||
| Open | None | T333894 wmtran Tool Loads External Resource |
Hello,
Thanks
This is my tool, why wasn't I assigned to this task immediately?
Because assigning someone else often gives the wrong impression that people work on something while they don't. It's a bad idea in general.
(There was a ping at https://wikitech.wikimedia.org/wiki/User_talk:Gryllida#wmtran_Tool_Review which didn't receive a timely reply either.)
Please feel free to create a toolinfo.json file (see https://toolhub.wikimedia.org/add-or-remove-tools?tab=urls ) and define a dedicated URI at which you watch incoming bug reports and feature requests for the tool. Thanks.
Can I use jQuery if I save a copy locally in toolforge?
That's off-topic for the topic of this task. Please see https://wikitech.wikimedia.org/wiki/Help:Cloud_Services_communication - thanks.