google / google/codeworld

Local instance loads remote Web resources

Aperta
#1,407 17 commenti 0 reazioni 0 assegnatari Vedi su GitHub
cleanup
Lingua principale
Haskell
Stelle
1.3k
Fork
201
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

I can't call this a bug report, because it's obviously intentional, but the CodeWorld home page of a locally installed instance loads many remote resources, including--

+ Google APIs (with Google authentication disabled)
+ JQuery from jquery.com
+ Something from jsdelivr.net
+ Something from wurfl.io
+ Something from polyfill.io
+ (Presumably) icons from materialdesignicons.com

... and stuff from various CDNs probably associated with the above.

I would not expect a local instance to load any code from, or communicate in any way with, anything but its own server, and definitely not without explicit permission from an administrator.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

The issue does not identify files, tests, or entry points. Start by auditing the CodeWorld home page and its loaded resources, including JQuery and the listed CDNs. Done means a local instance makes no external code or network requests without explicit administrator permission, with verification covering the identified resources.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
jquery
Ambito
frontend, security, web-dev
Tipo di issue
Funzionalità
Difficoltà
5/5
Tempo stimato
Più di una settimana
Stato di attività
Ferma
Chiarezza
Abbastanza chiara
Idoneità per principianti
25/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.