On Sun, 27 Nov 2016 at 23:32:59 +0100, W. Martin Borgert wrote:
> [jquery-tmpl's] author recommends JsRender instead.
> I assume, that it would be good to migrate.
> libjs-jsrender is in Debian.

Do you use the features of ikiwiki that use jquery-tmpl? (I believe
that means the attachment plugin.)

Would you be able to provide a patch, or test a patch if someone else
provides one?

Joey Hess wrote all ikiwiki's interactions with JavaScript libraries,
and I don't know how to test them at all thoroughly. I'd love to
replace the embedded libraries with more recent versions, but
at the moment I'm not confident that I can do that without
accidentally breaking the relevant functionality.

Unfortunately, the file uploading code appears to be based on
https://github.com/blueimp/jQuery-File-Upload (not in Debian)
which now uses a different templating engine (also not in Debian).
Perhaps libjs-plupload or libjs-moxie would be a viable replacement
for that?

A secondary issue here is that ikiwiki doesn't support symbolic links
as source files, for security (to avoid the symlink being replaced
with one that points elsewhere). It might be possible to relax this
for "underlays" such as the ones containing JavaScript; if not,
it might be possible to use dpkg triggers to update a non-symlinked
copy of other packages' JavaScript when those packages are upgraded.

I'm not going to touch this for stretch (what we have now is believed
to work, so I'm not going to break it now), but it would be great to
get this sorted out before buster.

    S

Reply via email to