[Pkg-javascript-devel] Bug#972570: Bug#972570: node-lightgallery is built using minified files
Daniel Ring
dring at wolfishly.me
Sat Apr 24 05:35:34 BST 2021
The warnings are already overridden in the current version on Salsa,
since the Youtube/Vimeo/etc. embeds are only loaded when Lightgallery is
used to display a video from that source (e.g. by passing it a Youtube
link).
Sincerely,
Daniel Ring
On 4/23/2021 12:31 PM, Yadd wrote:
> Le 23/04/2021 à 19:03, Jonas Smedegaard a écrit :
>> Quoting Yadd (2021-04-23 17:47:23)
>>> Control: tags -1 + pending
>>>
>>> Le 23/04/2021 à 09:44, Daniel Ring a écrit :
>>>> Hello Xavier,
>>>>
>>>> It looks like the build process was minifying the source files to the
>>>> destination *.js files and copying the pre-minified files to *.min.js. I
>>>> corrected it to copy the unminified files directly and minify them to
>>>> *.min.js.
>>>>
>>>> I also updated the package on Salsa to exclude the minified
>>>> modules/*.min.js files via Files-Excluded in d/copyright, so they're no
>>>> longer in the source package at all.
>>>>
>>>> Sincerely,
>>>> Daniel Ring
>>>
>>> Hi,
>>>
>>> looks good to me, thanks! Could you also ignore these warnings in a
>>> debain/lintian-overrides? It looks like false positive
>>>
>>> Cheers,
>>> Yadd
>>>
>>> W: node-lightgallery: privacy-breach-generic
>>> usr/share/nodejs/lightgallery/dist/js/lg-video.min.min.js [<iframe
>>> class="lg-video-object lg-dailymotion '+o+'" '+l+' width="560"
>>> height="315"
>> [...]
>> Those warnings look real to me.
>>
>> What makes you consider them false positives, Xavier?
>
> Hi Jonas,
>
> yes but the relevant lines are in if/then/else blocks:
>
> if (isVideo.youtube) {
> ... video = '<iframe ... src="//www.youtube.com/embed/' + .../>
>
> so it looks like a admin choice, Daniel maybe I'm wrong here ?
>
More information about the Pkg-javascript-devel
mailing list