isa/templates/campaign/campaigns.html and isa/templates/main/layout.html loads scripts from https://cdn.datatables.net. These should be changed to point to https://cdnjs.toolforge.org/ instead
Description
Description
Details
Details
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions | |||
| Open | None | T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses | |||
| Open | None | T172065 Hunt for Toolforge tools that load resources from third party sites | |||
| Open | Eugene233 | T324103 ISA tool uses third party cdn |
Event Timeline
Comment Actions
we currently use v. 1.10.18, but toolforge only hosts 1.10.21. It's unclear to me if there are any differences which would affect us.
Comment Actions
Change 879078 had a related patch set uploaded (by Eugene233; author: Eugene233):
[labs/tools/Isa@master] ISA tool uses third party cdn
Comment Actions
Change 950016 had a related patch set uploaded (by Eugene233; author: Eugene233):
[labs/tools/Isa@m2c] ISA tool uses third party cdn
Comment Actions
Change 879078 abandoned by Eugene233:
[labs/tools/Isa@master] ISA tool uses third party cdn
Reason:
In favor of https://gerrit.wikimedia.org/r/c/labs/tools/Isa/+/879078
Comment Actions
Change 952804 had a related patch set uploaded (by Sebastian Berlin (WMSE); author: Eugene233):
[labs/tools/Isa@m2c-rollback] ISA tool uses third party cdn
Comment Actions
Change 954642 had a related patch set uploaded (by Eugene233; author: Eugene233):
[labs/tools/Isa@main] ISA tool uses third party cdn
Comment Actions
Change 952804 abandoned by Eugene233:
[labs/tools/Isa@m2c-rollback] ISA tool uses third party cdn
Reason:
cherry picked on main
Comment Actions
Change 950016 abandoned by Eugene233:
[labs/tools/Isa@m2c] ISA tool uses third party cdn
Reason:
Cherry picked to new main branch