Nice -- Robert Samuel Newson rnew...@apache.org
On Tue, 1 Sep 2020, at 16:24, Jan Lehnardt wrote: > This PR by my coworker Jacoba should address this issue satisfactorily: > > https://github.com/apache/couchdb-fauxton/pull/1292 > > Best > Jan > — > > > On 27. Aug 2020, at 11:41, Jan Lehnardt <j...@apache.org> wrote: > > > > In ermouth's defence, I also think that the PR was merged prematurely. But > > adding a button with a warning that then conditionally loads the iframe > > should not be a lot of work and I'm happy to review a PR there. > > > > Cheers > > Jan > > — > > > >> On 27. Aug 2020, at 01:05, Joan Touzet <woh...@apache.org> wrote: > >> > >> A PR to disable the tab via an ini file setting would absolutely be > >> merged. Why not work on one? > >> > >> On 2020-08-26 6:45 p.m., ermouth wrote: > >>>> The blog is controlled by the CouchDB PMC. No one outside of the PMC or > >>> who they authorize has access to it. > >>> This is about wordpress server where the blog lives. The server is > >>> maintained so impressively, that shows default wordpress favicon for years > >>> and responds with x-hacker header, promoting jobs aggregator. It implies > >>> an > >>> obvious question about how reliable is the server in terms of injections > >>> and logs protection. > >>> Also the blog pings gravatar, not good. > >>>> If you don't want to display it, don't click on it, and the iframe won't > >>> This is not how things are protected, and I know that you know about it. > >>> ermouth > >>> чт, 27 авг. 2020 г. в 00:55, Joan Touzet <woh...@apache.org>: > >>>> At the moment, I have no plan to update Fauxton for 3.1.1. > >>>> > >>>> The blog is controlled by the CouchDB PMC. No one outside of the PMC or > >>>> who they authorize has access to it. > >>>> > >>>> If you don't want to display it, don't click on it, and the iframe won't > >>>> load. > >>>> > >>>> -Joan > >>>> > >>>> On 2020-08-26 11:57 a.m., ermouth wrote: > >>>>> Is that very unsafe PR > >>>>> https://github.com/apache/couchdb-fauxton/pull/1284 going > >>>>> to be included into 3.1.1? > >>>>> > >>>>> If it will, who exactly controls the wordpress site with those “news”? > >>>>> > >>>>> ermouth > >>>>> > >>>>> > >>>>> вт, 25 авг. 2020 г. в 23:45, Joan Touzet <woh...@apache.org>: > >>>>> > >>>>>> Hello there, > >>>>>> > >>>>>> I have time to get together a 3.1.1 release now. If you have any > >>>>>> pressing things to get into 3.x, or anything that's on master that > >>>>>> should be backported, please open your PRs now. > >>>>>> > >>>>>> -Joan "Labor Day! Schools are out and pools are open!" Touzet > >>>>>> > >>>>> > >>>> > > > >
