[Python-modules-commits] [jupyter-notebook] 01/08: Add rationale to the caja section

[Gordon Ball]

This is an automated email from the git hooks/post-receive script.

chronitis-guest pushed a commit to branch master
in repository jupyter-notebook.

commit f836188d74664007009169dcc857fb894f09ac77
Author: Gordon Ball <gordon at chronitis.net>
Date:   Thu Oct 27 16:20:47 2016 +0200

    Add rationale to the caja section
---
 debian/README.source | 15 +++++++++------
 debian/copyright     |  2 +-
 2 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/debian/README.source b/debian/README.source
index f817d1e..141c0d1 100644
--- a/debian/README.source
+++ b/debian/README.source
@@ -19,10 +19,15 @@ directories - see d/rules.
 caja
 ----
 
-Google-caja (HTML and CSS sanitizer) javascript files are included in
-debian/missing-source. These files come from [1], which appears to have been
-set up by the jupyter team to provide a bower-installable javascript package
-containing files picked from upstream [2].
+Jupyter uses the caja HTML and CSS sanitizer to clean potentially hazardous
+content from untrusted notebooks. Caja is a large java package with extensive
+dependencies (including GWT) which is not packaged for debian.
+
+Jupyter uses caja via a repository [1] apparently set up by the jupyter team
+to allow them to install the javascript parts of caja as a bower package, to
+fit in with their JS development environment. The "real" upstream is [2]. The
+relevant caja source files are included in debian/missing-source, and
+concatenated and minified during build.
 
 Of the files in missing-source, five are "bona-fide" source files cherry-picked
 from upstream (from `src/com/google/caja/plugin` in [2]), but the remaining two
@@ -34,7 +39,5 @@ transformation is performed by java classes from the caja
 `com.google.caja.lang.html.HtmlDefinitions$Builder`). The generated files
 are not obfuscated and contain a declaration that they are Apache-licensed.
 
-These files are concatenated and minified during build.
-
 [1]: https://github.com/minrk/google-caja-bower
 [2]: https://github.com/google/caja
diff --git a/debian/copyright b/debian/copyright
index f952866..c819063 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -11,7 +11,7 @@ License: BSD-3-clause
 Files: debian/missing-source/*
 Copyright: 2008-2014 Google Inc.
 License: Apache-2.0
-Comment: From https://github.com/minrk/google-caja-bower/
+Comment: See README.source for details
 
 License: BSD-3-clause
  All rights reserved.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/python-modules/packages/jupyter-notebook.git