Bug#763993: hamster-applet: HTML report uses JS scripts hosted at Google

Martín Ferrari tincho at debian.org
Sat Oct 4 15:08:36 UTC 2014


Package: hamster-applet
Version: 2.91.3+git20120514.b9fec3e1-1
Severity: normal

Hi,

Today, when trying to make a report of my monthly work while offline, I noticed
the HTML report would not load in the web browser. Turns out, it was trying to
download stuff from ajax.googleapis.com! 

So, this is problematic for three reasons:

* The jquery libraries are packaged for Debian, so hamster could just depend on
  them and use a file:// URL.
* Depending on an remote resource means offline operation is hampered for no
  good reason.
* Many people will be unhappy when they realise google is getting some
  information about them every time they produce a time sheet.

The offending code in the report is this:

<script type="text/javascript"
src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript"
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/jquery-ui.min.js"></script>
<link type="text/css"
href="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/themes/base/jquery-ui.css"
rel="stylesheet" />


-- System Information:
Debian Release: jessie/sid
Architecture: amd64 (x86_64)

Kernel: Linux 3.16-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages hamster-applet depends on:
ii  gconf2            3.2.6-3
ii  python            2.7.8-1
ii  python-cairo      1.8.8-1+b2
ii  python-dbus       1.2.0-2+b3
ii  python-gconf      2.28.1+dfsg-1
ii  python-gnome2     2.28.1+dfsg-1
ii  python-gobject-2  2.28.6-12+b1
ii  python-gtk2       2.24.0-4
ii  python-wnck       2.32.0+dfsg-3
ii  python-xdg        0.25-4
ii  python2.7         2.7.8-7

Versions of packages hamster-applet recommends:
ii  gnome-icon-theme  3.12.0-1
ii  python-notify     0.1.1-3

Versions of packages hamster-applet suggests:
pn  python-evolution  <none>

-- no debconf information



More information about the pkg-gnome-maintainers mailing list