Local instance loads remote Web resources
- Lingua principale
- Haskell
- Stelle
- 1.3k
- Fork
- 201
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
I can't call this a bug report, because it's obviously intentional, but the CodeWorld home page of a locally installed instance loads many remote resources, including--
+ Google APIs (with Google authentication disabled)
+ JQuery from jquery.com
+ Something from jsdelivr.net
+ Something from wurfl.io
+ Something from polyfill.io
+ (Presumably) icons from materialdesignicons.com
... and stuff from various CDNs probably associated with the above.
I would not expect a local instance to load any code from, or communicate in any way with, anything but its own server, and definitely not without explicit permission from an administrator.
Guida per i contributori
Apri la guida per i contributori
Direzione di ricerca
The issue does not identify files, tests, or entry points. Start by auditing the CodeWorld home page and its loaded resources, including JQuery and the listed CDNs. Done means a local instance makes no external code or network requests without explicit administrator permission, with verification covering the identified resources.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Valutazione
- Stack tecnologico
- jquery
- Ambito
- frontend, security, web-dev
- Tipo di issue
- Funzionalità
- Difficoltà
- 5/5
- Tempo stimato
- Più di una settimana
- Stato di attività
- Ferma
- Chiarezza
- Abbastanza chiara
- Idoneità per principianti
- 25/100