Page MenuHomePhabricator

Tool "geoplotter" loads assets from google, bootstrapcdn, cloudflare, and cartocdn; mixed http/https
Open, Needs TriagePublic

Description

https://tools.wmflabs.org/geoplotter/: https://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
https://tools.wmflabs.org/geoplotter/: https://netdna.bootstrapcdn.com/bootstrap/3.0.3/js/bootstrap.min.js
https://tools.wmflabs.org/geoplotter/: https://fonts.googleapis.com/css?family=Open+Sans:400,300,500,600,700
https://tools.wmflabs.org/geoplotter/: https://fonts.googleapis.com/css?family=Source+Sans+Pro:100,200,300,400,700,900
https://tools.wmflabs.org/geoplotter/: http://fonts.googleapis.com/css?family=Roboto+Slab:400,700,300,100
https://tools.wmflabs.org/geoplotter/: http://fonts.googleapis.com/css?family=Roboto+Mono:300,400,100,500,700
https://tools.wmflabs.org/geoplotter/: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css
https://tools.wmflabs.org/geoplotter/: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
https://tools.wmflabs.org/geoplotter/: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.10.6/moment.min.js
https://tools.wmflabs.org/geoplotter/: http://libs.cartocdn.com/cartodb.js/v3/3.15/themes/css/cartodb.css
https://tools.wmflabs.org/geoplotter/: http://libs.cartocdn.com/cartodb.js/v3/3.15/cartodb.js
https://tools.wmflabs.org/geoplotter/: https://fonts.gstatic.com/s/sourcesanspro/v10/ODelI1aHBYDBqgeIAH2zlNzbP97U9sKh0jjxbPbfOKg.ttf
https://tools.wmflabs.org/geoplotter/: https://fonts.gstatic.com/s/sourcesanspro/v10/toadOcfmlt9b38dHJxOBGLsbIrGiHa6JIepkyt5c0A0.ttf
https://tools.wmflabs.org/geoplotter/: http://themes.googleusercontent.com/static/fonts/robotoslab/v3/y7lebkjgREBJK96VQi37ZrrIa-7acMAeDBVuclsi6Gc.woff

Loading from external providers are discouraged. Please see parent tasks and J65.
In your case a direct replacement for some of the urls would be:

I'm not sure about the ones from themes.googleusercontent.com and libs.cartocdn.com.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 4 2017, 2:52 PM
MaxSem added a subscriber: MaxSem.Jul 15 2018, 2:31 AM

This is still an issue. What's the procedure for non-compliant tools with nonresponsive maintainers?