Tool "etytree" loads jquery, jquery-mobile, and jquery-ui from code.jquery.com, mixed http/https
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	zhuyifei1999
	Aug 4 2017, 1:59 PM

Description

https://tools.wmflabs.org/etytree/: http://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.css
https://tools.wmflabs.org/etytree/: https://code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
https://tools.wmflabs.org/etytree/: https://code.jquery.com/jquery-1.10.2.js
https://tools.wmflabs.org/etytree/: https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.js
https://tools.wmflabs.org/etytree/: https://code.jquery.com/ui/1.11.4/jquery-ui.js
https://tools.wmflabs.org/etytree/: http://code.jquery.com/mobile/1.4.5/images/ajax-loader.gif

Loading from external providers are discouraged. Please see parent tasks and J65.
In your case a direct replacement would be:

Related Objects
Search...

Status	Assigned	Task
Open	None	T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions
Open	None	T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses
Open	None	T172065 Hunt for Toolforge tools that load resources from third party sites
Resolved	Epantaleo	T172519 Tool "etytree" loads jquery, jquery-mobile, and jquery-ui from code.jquery.com, mixed http/https

Event Timeline

zhuyifei1999 created this task.Aug 4 2017, 1:59 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 4 2017, 1:59 PM

Epantaleo closed this task as Resolved.Sep 18 2017, 6:46 PM

$ curl https://tools.wmflabs.org/etytree/ -s | grep jquery
<link rel="stylesheet" href="http://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.css">
<link rel="stylesheet" href="//code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css">
<script src="https://code.jquery.com/jquery-1.10.2.js"></script>
<script src="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.js"></script>
<script src="https://code.jquery.com/ui/1.11.4/jquery-ui.js"></script>

Krenair subscribed.Sep 18 2017, 7:16 PM

Oh ok, missed that file! It should be ok now.

zhuyifei1999 awarded a token.Sep 18 2017, 7:20 PM

Tool "etytree" loads jquery, jquery-mobile, and jquery-ui from code.jquery.com, mixed http/httpsClosed, ResolvedPublicActions

Description

Related ObjectsSearch...

Event Timeline

Tool "etytree" loads jquery, jquery-mobile, and jquery-ui from code.jquery.com, mixed http/https
Closed, ResolvedPublic
Actions

Related Objects
Search...