Tool "wikiwatchdog" loads assets from many sites, mixed http/https
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	zhuyifei1999
	Aug 11 2017, 1:34 AM

Description

(List too long to be pasted here; see P5825 for details)

Loading from external providers are discouraged. Please see parent tasks and J65.

Some of them I noticed:

Google Analytics: Is it required for the operation of the tool?
sharethis.com: Looks like for the share buttons on the right. You might want to host a proxy if it's required.
code.jquery.com: https://tools-static.wmflabs.org/cdnjs/ajax/libs/jquery/

Also note that due to mixing http / https, the https version of the tool may not load on some browsers.

Status	Assigned	Task
Open	None	T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions
Open	None	T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses
Open	None	T172065 Hunt for Toolforge tools that load resources from third party sites
Open	None	T173071 Tool "wikiwatchdog" loads assets from many sites, mixed http/https

The tool maintainer is Sonet. I cannot find their Phabricator username.