-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hello,
On 05/10/16 13:26, Frederic Bonnard wrote:
> Thanks Benoit/Ghislain,
> indeed with experimental archive it's much better :)
>
> Benoit,
> my last point would be about privacy-breach-generic lintian.
> You overrided it with :
> --
> N: The involved links are meant to illustrate URL examples, so it is
> meaningless
> N: to bring the involved material in a local folder.
> --
>
> I agree that bringing stuff locally (as it is advised in the lintian
> description) is useless when the goal is to show the code for how to embed
> content of remote images/videos URLs.
> Though I still think there's a breach, as loading the documentation makes your
> browser connect to the internet, load images but also javascripts and so on,
> which
> is originally the reason of this lintian definition (or let me know if I'm
> wrong).
> Even if you point to DFSG-free ressources, you'll have your browser that will
> still
> connect outside, and that's the issue in my understanding.
>
> I've been thinking about this and reading your discussion with Paul Wise,
> I came to the following idea : why not changing after generation the html
> (sed...) :
>
> For images :
> ---
> -https://www.python.org/static/img/python-logo-large.png"/>
> +https://www.python.org/static/img/python-logo-large.png should be displayed,
> but it got removed because of
> https://lintian.debian.org/tags/privacy-breach-generic.html.;
> ---
>
> and for the embedded video :
>
> ---
>width="400"
> height="300"
> -src="https://www.youtube.com/embed/WAikxUGbomY;
> +src="about:blank"
> frameborder="0"
> allowfullscreen
> +srcdoc="This video : https://www.youtube.com/embed/WAikxUGbomY should be
> displayed, but it got removed because of
> https://lintian.debian.org/tags/privacy-breach-generic.html.;
> >
> ---
>
> That way, you'll keep the source code example clean, and despite the fact the
> html
> is modified, the user reading the documentation will still understand the
> example, what
> it should do, what is displayed and altered and why.
> Ok the documentation html code is modified but the goal of the doc is to get
> the idea of the use (source code) and visual result (rather than html output
> that got modified)
> I also thought of playing with Content-Security-Policy in of the
> document to block
> all outside connections but, I'm not sure all browser implement this
> correctly.
> It's also less understable for the reader to understand why things
> disappeared (except
> if this "framework" have information facilities). But it would be very good
> to fix
> all the privacy-breach-generic in a general manner.
When I wrote the lintian override, I have in mind beside the HTML output the
ipynb input,
only the former is taken into account by lintian.
Meanwhile, I relized that lintian was not able to point out an audio
privacy-breatch..
Anyway, I brought the suggested material. The hard part was the refreshment of
the debian/copyright file:
it is getting large.
I hope the package is fine now.
Thanks,
Jerome
>
>
> F.
>
- --
Jerome BENOIT | calculus+at-rezozer^dot*net
https://qa.debian.org/developer.php?login=calcu...@rezozer.net
AE28 AE15 710D FF1D 87E5 A762 3F92 19A6 7F36 C68B
-BEGIN PGP SIGNATURE-
iQQcBAEBCgAGBQJX9uUQAAoJED+SGaZ/NsaL7W8f/i7CCIYZzleqbHqaCn1Hhz7V
rCfXDVGuIfVsYoRQrFZX/w7DMOX6teiwwlOTiD4kwZc8YcwX+4E+ZkaHx4zCvqii
QqFIXUWiVgJ+Z0+ZMdMi1X+ef708K5M/92iAKWBPFp6F2Kri7qJQsTwkrsVRMt7k
RaldggeFiNTJfKqZFp6kLlh8acSFHOdccQ8/EAnBUT1Uz6xByWRofl1JA09zncZ/
4U7SaOH6p9Cfa3xa9SAN++BFDmOMjJ/J6NlJ6ieXg9+LV213l7WbU/hxD+YANtRu
hICHZhvTNmX66S95nZKuPqCwla+CIEByO9p/973ocrrtQPktdyg+b8AV0vrkkxDA
JmBxKiR3rwQs9oaN7er9zj2H97jMMJhH5THBbdWxXTSAAE645+x9G7M8sIq3CAxB
feTaaXVElye8sKAU4PyI9smJrHs8GBKxmBWzf3hwsc+f11FjT7vgnt3NRTLs5oFH
xN2xy/tvWAucnJXH7he7fJ+M9yh7jDidXlhS5NbzNrB5JeUdWkZL4mUGKS7sloXh
KsGzaQ3OyaILpq4o79KGzl0vvYpxGLngTOlb+IITqsZVEVIwcW9CN4mr9bH7hLKt
vzn9mEteOG3nADvQdUaBmJveuT5TcsHLE87rofCCjyo5LXzdzC0Ydtiph9UfDNX+
pxBoEC/gCDSgEzQXSWGCbpkme3ZOlC1HK6vvp3g9lmoK0PO+a3yXvuxb+L36ixxL
esWs92+kZUjPVcECdj7/cbGQIXxmMwUrBMmDB4qcjvlCt1KX0fyykFRgBGLINK3z
MOtAX/WhLoWbLDiZDSwZQxdq5AafSOQKOV03feOjlTwS2/BHYGEHedRTaHWPI56o
lavs3dlTqsEngb5U5mL6qwMWEJXD3tTDccH72+ZwTzIHtnZ/t0XdcXd4aeMOWXGY
6rwkoGo4xaqDsCCzEeE86gJFWgT4qyOuKtg+Z9TvUg206W+FpGNeHl8UhuRra7dc
e/sZ+lMEo9N8X4VIj/xNzh4JFFxSnjTERXWw64FgyXZwW/PKx2PzTZ2U/mw1yEXz
emsJjnTom+MYCA0lgmx1n5lTSB40I3Z7C0Wyz9sUBXmOA3rXND5GfqiFHnmuoQmV
LBrLscpjQumCjDGkIOy8gw6CUTRsAKYP/8+Co0pxqkKyygM80FG3myOuMsTtox4+
HJ3IKKXMufFFloebFSVOgwt6N5HsmoQP30iz6mLdRWzpJVPP/Fehe4DjoER8XcJK
toICHz2XahUGW2yVtam7BF0AbqtOMEsfW/TN+SGiOTxtcrwV9ANnNwWrn/0m6ssH
F1xkL4M91HwwWl/uPoRF9jUsHgotxWbdvaTamDokMCzxseiDPVHzUPEHPMcsSc8=
=6IoF
-END PGP SIGNATURE-
