This PR by my coworker Jacoba should address this issue satisfactorily:

   https://github.com/apache/couchdb-fauxton/pull/1292

Best
Jan
—

> On 27. Aug 2020, at 11:41, Jan Lehnardt <j...@apache.org> wrote:
> 
> In ermouth's defence, I also think that the PR was merged prematurely. But 
> adding a button with a warning that then conditionally loads the iframe 
> should not be a lot of work and I'm happy to review a PR there.
> 
> Cheers
> Jan
> —
> 
>> On 27. Aug 2020, at 01:05, Joan Touzet <woh...@apache.org> wrote:
>> 
>> A PR to disable the tab via an ini file setting would absolutely be merged. 
>> Why not work on one?
>> 
>> On 2020-08-26 6:45 p.m., ermouth wrote:
>>>> The blog is controlled by the CouchDB PMC. No one outside of the PMC or
>>> who they authorize has access to it.
>>> This is about wordpress server where the blog lives. The server is
>>> maintained so impressively, that shows default wordpress favicon for years
>>> and responds with x-hacker header, promoting jobs aggregator. It implies an
>>> obvious question about how reliable is the server in terms of injections
>>> and logs protection.
>>> Also the blog pings gravatar, not good.
>>>> If you don't want to display it, don't click on it, and the iframe won't
>>> This is not how things are protected, and I know that you know about it.
>>> ermouth
>>> чт, 27 авг. 2020 г. в 00:55, Joan Touzet <woh...@apache.org>:
>>>> At the moment, I have no plan to update Fauxton for 3.1.1.
>>>> 
>>>> The blog is controlled by the CouchDB PMC. No one outside of the PMC or
>>>> who they authorize has access to it.
>>>> 
>>>> If you don't want to display it, don't click on it, and the iframe won't
>>>> load.
>>>> 
>>>> -Joan
>>>> 
>>>> On 2020-08-26 11:57 a.m., ermouth wrote:
>>>>> Is that very unsafe PR
>>>>> https://github.com/apache/couchdb-fauxton/pull/1284 going
>>>>> to be included into 3.1.1?
>>>>> 
>>>>> If it will, who exactly controls the wordpress site with those “news”?
>>>>> 
>>>>> ermouth
>>>>> 
>>>>> 
>>>>> вт, 25 авг. 2020 г. в 23:45, Joan Touzet <woh...@apache.org>:
>>>>> 
>>>>>> Hello there,
>>>>>> 
>>>>>> I have time to get together a 3.1.1 release now. If you have any
>>>>>> pressing things to get into 3.x, or anything that's on master that
>>>>>> should be backported, please open your PRs now.
>>>>>> 
>>>>>> -Joan "Labor Day! Schools are out and pools are open!" Touzet
>>>>>> 
>>>>> 
>>>> 
> 

Reply via email to