[Pkg-gmagick-im-team] Bug#700784: imagemagick-doc: advertising / spying beacon in locally installed docs

Adam Borowski kilobyte at angband.pl
Sun Feb 17 14:01:11 UTC 2013


Package: imagemagick-doc
Version: 8:6.7.9.3-2
Severity: normal


/usr/share/doc/imagemagick/www/perl-magick.html includes the following:

<div style="margin: 17px auto; float: left;">
  <script type="text/javascript">
  <!--
    google_ad_client = "pub-3129977114552745";
    google_ad_slot = "5439289906";
    google_ad_width = 728;
    google_ad_height = 90;
  //-->
  </script>
  <script type="text/javascript"
    src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
  </script>
</div>

Shoveling advertising crap in locally installed documentation is
inappropriate.  Even worse, AdBlock assumes local files are supposed to be
exempt from filtering, and thus lets this go despite user's configuration.

Beyond a (minor) visual annoyance, this is also a privacy hole.

There are other remote files used unconditionally in the docs.  One of them,
http://ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js, has been
already reported, the others apparently did not yet.

Please either remove them (when they're ads or spyware), or ship a local
copy.  A remote link is 100% fine, something that tracks you without your
request is not.  If a network connection is required to read these docs,
why are they even shipped in the first place?


-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (150, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.7.1-x32 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

imagemagick-doc depends on no packages.

Versions of packages imagemagick-doc recommends:
ii  chromium [www-browser]   24.0.1312.68-1
ii  elinks [www-browser]     0.12~pre5-9
ii  iceweasel [www-browser]  18.0.2-1

Versions of packages imagemagick-doc suggests:
ii  imagemagick  8:6.7.7.10-5

-- no debconf information



More information about the Pkg-gmagick-im-team mailing list