Page MenuHomePhabricator

Tool "wikidata-primary-sources" loads assets from online.swagger.io
Open, Needs TriagePublic

Description

https://tools.wmflabs.org/wikidata-primary-sources/: http://online.swagger.io/validator?url=https://tools.wmflabs.org/wikidata-primary-sources/swagger/swagger.json

Loading from external providers are discouraged. Please see parent tasks and J65.

You may want to setup a proxy, or make the validator static content and host the image locally in your tool.

Event Timeline

Restricted Application added subscribers: PokestarFan, Aklapper. · View Herald TranscriptAug 9 2017, 11:47 PM

Or alternatively you could ask for consent before loading it. Eg.: replace the icon with a button that says something like "load validator on online.swagger.io", and if the user press it then replace the button with the validator icon.

Any news here ? :)