[Pkg-mozext-maintainers] Bug#771588: unblock: https-everywhere/4.0.2-3

Damyan Ivanov dmn at debian.org
Sun Nov 30 21:56:28 UTC 2014


Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Please unblock package https-everywhere

https-everywhere (4.0.2-3) unstable; urgency=medium

  * forgotten bug closer in previous changelog entry
  * add Bug-Debian to no-unconditional-FAQ-load.patch description

 -- Damyan Ivanov <dmn at debian.org>  Fri, 28 Nov 2014 09:59:35 +0000

https-everywhere (4.0.2-2) unstable; urgency=medium

  * Team upload

  * Patch src/chrome/content/toolbar_button.js to make loading of the FAQ
    require user action.
    When run for the first time, the addon shows a notification bar.
    Closing that bar loads the HTTPS-everywhere FAQ from the authors' site.
    This is a privacy breach. This patch requires pressing a 'FAQ…' button
    before loading the remote page.
    Closes: #771286

 -- Damyan Ivanov <dmn at debian.org>  Fri, 28 Nov 2014 09:31:54 +0000

This is similar in spirit with the unblock for greasemonkey/2.2-2, tracked in 
#771242.

The changes add a patch requires that the user presses a button in order to 
load the remote page, and just cdismissing the notification does nothing.

Patch attached, as well as a debdiff against 4.0.2-1 in Jessie.

unblock https-everywhere/4.0.2-3


Thanks,
    dam

-- System Information:
Debian Release: jessie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
-------------- next part --------------
A non-text attachment was scrubbed...
Name: no-unconditional-FAQ-load.patch
Type: text/x-diff
Size: 1884 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozext-maintainers/attachments/20141130/8063becf/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: https-everywhere.debdiff
Type: text/x-diff
Size: 3848 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozext-maintainers/attachments/20141130/8063becf/attachment.diff>


More information about the Pkg-mozext-maintainers mailing list