[Python-modules-team] Bug#677929: python-docutils: remote copy of MathJax needed to render maths
Jakub Wilk
jwilk at debian.org
Sun Jun 17 19:41:39 UTC 2012
Package: python-docutils
Version: 0.9-1
Severity: serious
Quoting HISTORY.txt:
| Release 0.9 (2012-05-02)
| ========================
| [...]
| * docutils/writers/html4css1/__init__.py
|
| - Change default for `math-output` setting to MathJax.
So if you convert a document containing maths, you'll get this:
$ echo ':math:`42`' | rst2html | grep script.*http
<script type="text/javascript" src="http://cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script>
That is, if you open such document in a modern browser, it will happily
download some JavaScript code from a remote site. I feel this violation
of our users privacy (and a security concern).
--
Jakub Wilk
More information about the Python-modules-team
mailing list