https://tools.wmflabs.org/matthewrbowker-dev/: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css https://tools.wmflabs.org/matthewrbowker-dev/: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js
Loading from external providers are discouraged. Please see parent tasks and J65.
In your case a direct replacement would be:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions | |||
| Open | None | T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses | |||
| Open | None | T172065 Hunt for Toolforge tools that load resources from third party sites | |||
| Resolved | Matthewrbowker | T172661 Tool "matthewrbowker-dev" loads bootstrap from bootstrapcdn |
Already fixed on my local dev tools, I have just been really bad at git and deploying fixes there
Still not fixed at the moment:
$ curl https://tools.wmflabs.org/matthewrbowker-dev/ -s | grep bootstrapcdn <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css" rel="stylesheet" <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js"
Whether it is fixed locally or now is outside the scope of this task. This task concerns pages under schema http/https, domain tools.wmflabs.org, and path under /matthewrbowker-dev only.