> On Feb 20, 2024, at 10:46 AM, Dave Fisher <w...@apache.org> wrote:
>
>
>
>> On Feb 20, 2024, at 8:54 AM, Julien Jakubowski
>> <julien.jakubow...@streamnative.io.INVALID> wrote:
>>
>> Hi,
>> Thanks for the heads up!
>> jsDelivr and Google serve as CDNs. According to the Apache Software
>> Foundation's privacy policy (
>> https://privacy.apache.org/policies/privacy-policy-public.html), Fastly is
>> the CDN to use. Consequently, substituting jsDelivr and Google CDNs with
>> Fastly could be a viable alternative. Do you know if the Apache Foundation
>> has a Fastly account? Who to reach out to about this?
>
> You should reach out to priv...@apache.org, but know that whimsy is flagging
> fastly.jsdeliver.net and the board is about to implement technical measures
> to block external resources with http policies. You could ask Infra about
> that on the ASF Slack #asfinfra or us...@infra.apache.org
Before you do review: https://privacy.apache.org/policies/website-policy.html
> 4) Using Assets from other Domains
>
> Assets (JavaScript files or snippets, images, fonts, CSS, etc.) from other
> domains cannot be loaded. All assets need to be hosted on ASF servers.
Best,
Dave
>
> Best,
> Dave
>
>
>> Best,
>> Julien
>>
>> On Sun, Feb 18, 2024 at 11:30 PM Dave Fisher <w...@apache.org> wrote:
>>
>>> Hi -
>>>
>>> I hope that someone will pick up this issue.
>>>
>>> Best,
>>> Dave
>>>
>>>> On Feb 18, 2024, at 2:29 PM, dave2wave (via GitHub) <g...@apache.org>
>>> wrote:
>>>>
>>>>
>>>> dave2wave opened a new issue, #22068:
>>>> URL: https://github.com/apache/pulsar/issues/22068
>>>>
>>>> ### Search before asking
>>>>
>>>> - [X] I searched in the [issues](
>>> https://github.com/apache/pulsar/issues) and found nothing similar.
>>>>
>>>>
>>>> ### Version
>>>>
>>>> Current pulsar website
>>>>
>>>> ### Minimal reproduce step
>>>>
>>>> See the ASF's internal report on the compliance of pulsar.apache.org
>>> with policy: https://whimsy.apache.org/site/project/pulsar
>>>>
>>>> ### What did you expect to see?
>>>>
>>>> All boxes should be green.
>>>>
>>>> ### What did you see instead?
>>>>
>>>> The resources box is red. The policy is to avoid use of domains which
>>> may track users. This is for GPDR compliance.
>>>>
>>>> There are two different external resource domains being used in three
>>> source files:
>>>>
>>>> ```
>>>> pulsar-site % grep -ni cdn.jsdelivr.net ./static/reference/index.html
>>>> 17: href="
>>> https://cdn.jsdelivr.net/npm/docsify-themeable@0/dist/css/theme-simple-dark.css
>>> "
>>>> 22: href="
>>> https://cdn.jsdelivr.net/npm/docsify-themeable@0/dist/css/theme-simple.css
>>> "
>>>> 231: <script src="
>>> https://cdn.jsdelivr.net/npm/docsify@4/lib/docsify.min.js";></script>
>>>> 232: <script src="
>>> https://cdn.jsdelivr.net/npm/docsify-themeable@0/dist/js/docsify-themeable.min.js
>>> "></script>
>>>> 235: <script src="
>>> https://cdn.jsdelivr.net/npm/docsify@4/lib/plugins/search.js";></script>
>>>> 236: <script src="
>>> https://cdn.jsdelivr.net/npm/docsify@4/lib/plugins/zoom-image.min.js
>>> "></script>
>>>> 241: <script src="
>>> https://cdn.jsdelivr.net/npm/docsify-sidebar-collapse/dist/docsify-sidebar-collapse.min.js
>>> "></script>
>>>> ```
>>>>
>>>> ```
>>>> pulsar-site % grep -ni cdn.jsdelivr.net ./docusaurus.config.js
>>>> 481: href: "
>>> https://cdn.jsdelivr.net/npm/katex@0.13.24/dist/katex.min.css";,
>>>> ```
>>>>
>>>> ```
>>>> pulsar-site % grep -ni fonts.google ./src/css/typography.css
>>>> 1:@import url("
>>> https://fonts.googleapis.com/css2?family=Work+Sans:ital,wght@0,400;0,500;0,600;1,400;1,500;1,600&display=swap
>>> ");
>>>> ```
>>>>
>>>> ### Anything else?
>>>>
>>>> The boxes will be green once these resources are moved to static
>>> resources hosted on the `pulsar.apache.org` website
>>>>
>>>> ### Are you willing to submit a PR?
>>>>
>>>> - [ ] I'm willing to submit a PR!
>>>>
>>>>
>>>> --
>>>> This is an automated message from the Apache Git Service.
>>>> To respond to the message, please log on to GitHub and use the
>>>> URL above to go to the specific comment.
>>>>
>>>> To unsubscribe, e-mail: commits-unsubscr...@pulsar.apache.org.apache.org
>>>>
>>>> For queries about this service, please contact Infrastructure at:
>>>> us...@infra.apache.org
>>>>
>>>
>>>
>
