Page MenuHomePhabricator

Tool "wikidata-primary-sources" loads assets from online.swagger.io
Open, Needs TriagePublic

Description

https://tools.wmflabs.org/wikidata-primary-sources/: http://online.swagger.io/validator?url=https://tools.wmflabs.org/wikidata-primary-sources/swagger/swagger.json

Loading from external providers are discouraged. Please see parent tasks and J65.

You may want to setup a proxy, or make the validator static content and host the image locally in your tool.

Event Timeline

Or alternatively you could ask for consent before loading it. Eg.: replace the icon with a button that says something like "load validator on online.swagger.io", and if the user press it then replace the button with the validator icon.