[Pkg-javascript-devel] Bug#603513: Bug#603513: yui: multiple xss issues in included swf files

Jaldhar H. Vyas jaldhar at debian.org
Sun Nov 28 19:18:17 UTC 2010


On Mon, 29 Nov 2010, Thomas Goirand wrote:

> Take care if you do that: there's some reverse dependencies involved!
> I'd rather that you just remove the swf files from the package, and
> create a non-free package for them. There's many cases were you will
> need yui, but not the attached swf files!!!
>

Good point.  There are only four components that include swf files.  It 
should be possible to seperate them out into a non-free package.  I'll 
bear that in mind if there is no way to keep it all in main.

-- 
Jaldhar H. Vyas <jaldhar at debian.org>
La Salle Debain - http://www.braincells.com/debian/





More information about the Pkg-javascript-devel mailing list