#33363: Don’t load static assets from external servers
------------------------------------------------+------------------------
Reporter: kmohrf | Owner: nobody
Type: Cleanup/optimization | Status: new
Component: GIS | Version: 4.0
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
------------------------------------------------+------------------------
Hi,
I’ve noticed that the `django.contrib.gis` module, specifically:
*
[https://github.com/django/django/blob/main/django/contrib/gis/forms/widgets.py#L84
forms/widgets.py line 84]
*
[https://github.com/django/django/blob/main/django/contrib/gis/forms/widgets.py#L89
forms/widgets.py line 89]
* and
[https://github.com/django/django/blob/main/django/contrib/gis/admin/options.py#L64
admin/options.py line 64]
loads JavaScript and CSS files from Cloudflare CDN servers. I find this
very irritating and though
[https://docs.djangoproject.com/en/4.0/ref/contrib/gis/forms-
api/#django.contrib.gis.forms.widgets.OpenLayersWidget the documentation
mentions] that I’m free to override these assets myself I don’t think it’s
a good default for privacy nor service reliability to use third party
servers. I’ve noticed this myself because my project’s Content-Security-
Policy blocks cross origin hosts.
As far as I can see the sources are all released under the BSD license and
can probably be shipped along with Django. Is there any reason this hasn’t
been done and would you care for pull requests that include these
libraries as part of the static assets shipped with the
`django.contrib.gis` module?
Thank you for your time,
Konrad
--
Ticket URL: <https://code.djangoproject.com/ticket/33363>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/049.882e8281ccb2a6556dbe839bf386e2c4%40djangoproject.com.
