google / google/codeworld

Local instance loads remote Web resources

Open
#1,407 17 comments 0 reactions 0 assignees View on GitHub
cleanup
Dominant language
Haskell
Stars
1.3k
Forks
201
PR merge metrics
No merged PRs in 30d

Description

I can't call this a bug report, because it's obviously intentional, but the CodeWorld home page of a locally installed instance loads many remote resources, including--

+ Google APIs (with Google authentication disabled)
+ JQuery from jquery.com
+ Something from jsdelivr.net
+ Something from wurfl.io
+ Something from polyfill.io
+ (Presumably) icons from materialdesignicons.com

... and stuff from various CDNs probably associated with the above.

I would not expect a local instance to load any code from, or communicate in any way with, anything but its own server, and definitely not without explicit permission from an administrator.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.