Couldn't this simply work with libjs-bootstrap4? Seems like using
bootstrap4 would be a net improvement anyway, especially sicne it then
wouldn't be encumbered by the open CVEs.
For me; it's a tentative ACK for the MIR provided the Security Team also
ACKs it. I'm not looking for a full code-review -- I did that, nothing
jumps out (but yeah, sure, XSS CVEs); but I think we ought to have a
formal decision from the security team as to whether they are fine with
this as-is; or as I think, that it would be *much* preferable to use
twitter-bootstrap4.
** Changed in: twitter-bootstrap3 (Ubuntu)
Status: New => In Progress
** Changed in: twitter-bootstrap3 (Ubuntu)
Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Server
(ubuntu-server)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1820226
Title:
[MIR] twitter-bootstrap3 as dependency of mailman3
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/twitter-bootstrap3/+bug/1820226/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
