Tool "traffic-grapher" loads jquery from code.jquery.com
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	zhuyifei1999
	Aug 9 2017, 11:25 PM

Description

https://tools.wmflabs.org/traffic-grapher/: http://code.jquery.com/jquery-1.10.2.js

Loading from external providers are discouraged. Please see parent tasks and J65.
In your case a direct replacement would be https://tools-static.wmflabs.org/cdnjs/ajax/libs/jquery/1.10.2/jquery.min.js

Status	Assigned	Task
Open	None	T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions
Open	None	T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses
Open	None	T172065 Hunt for Toolforge tools that load resources from third party sites
Resolved	SuperHamster	T172964 Tool "traffic-grapher" loads jquery from code.jquery.com

The tool maintainer is KevinPayravi. I cannot find their Phabricator username.

In T172964#3514623, @zhuyifei1999 wrote:

The tool maintainer is KevinPayravi. I cannot find their Phabricator username.

@SuperHamster By searching "Kevin Payravi"

Thanks for bringing this to my attention. Currently caught up in Wikimania but will fix this soon.

PR merged but not in live yet

It took a bit longer than I'd like to admit to figure out my shell account name, but the change is live.

Thanks !