Re: Updating nbconvert : problems with privacy breaches

[Julien Puydt]

Hi,

Le 15/09/2018 à 07:34, Diane Trout a écrit :
 
I wonder if it'd be possible to get upstream to support picking where

to load resources from?


indeed asking upstream seems the best course of action:

https://github.com/jupyter/nbconvert/issues/890

jpuydt on irc.debian.org

Re: Updating nbconvert : problems with privacy breaches

[Diane Trout]

> But the other files... it's about changing the exporters and
> templates 
> during document generation ; and the resulting files might then get
> used 
> on non-Debian systems. In short : if I tamper with them to use
> Debian 
> local packages, that basically means nbconvert in Debian will
> produce 
> broken documents.
> 
> Perhaps patching customizing.html after it was built (using sed 
> magic...) is an acceptable solution?
> 
> Since I don't feel sure about my course of action, I thought it would
> be 
> better to ask for advice and ideas here.

I wonder if it'd be possible to get upstream to support picking where
to load resources from?

Bokeh has some options to pick loading resources between local or the
CDN. https://bokeh.pydata.org/en/latest/docs/reference/resources.html


signature.asc
Description: This is a digitally signed message part

Updating nbconvert : problems with privacy breaches

[Julien Puydt]

Hi,

looking into finishing packaging nbconvert's latest version (thanks 
Ondřej Nový and Gordon Ball for the help!), lintian had quite a few 
complaints about privacy breaches:


W: python-nbconvert-doc: privacy-breach-generic 
usr/share/doc/python-nbconvert-doc/html/customizing.html [src="https://cdnjs.cloudflare.com/ajax/libs/require.js/2.1.10/require.min.js";>] 
(https://cdnjs.cloudflare.com/ajax/libs/require.js/2.1.10/require.min.js)
E: python-nbconvert-doc: privacy-breach-uses-embedded-file 
usr/share/doc/python-nbconvert-doc/html/customizing.html You may use the 
libjs-jquery package. 
(https://cdnjs.cloudflare.com/ajax/libs/jquery/2.0.3/jquery.min.js)
E: python-nbconvert-doc: privacy-breach-uses-embedded-file 
usr/share/doc/python-nbconvert-doc/html/customizing.html You may use the 
libjs-mathjax package. 
(https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/mathjax.js?config=tex-ams_html)


And indeed grepping the source code, there are a few places with links 
to cloudflare.com :

./docs/source/customizing.ipynb:"