[Python-modules-team] Bug#677929: python-docutils: remote copy of MathJax needed to render maths

Jakub Wilk jwilk at debian.org
Sun Jun 17 19:41:39 UTC 2012


Package: python-docutils
Version: 0.9-1
Severity: serious

Quoting HISTORY.txt:
| Release 0.9 (2012-05-02)
| ========================
| [...]
| * docutils/writers/html4css1/__init__.py
|
|   - Change default for `math-output` setting to MathJax.

So if you convert a document containing maths, you'll get this:

$ echo ':math:`42`' | rst2html | grep script.*http
<script type="text/javascript" src="http://cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script>

That is, if you open such document in a modern browser, it will happily 
download some JavaScript code from a remote site. I feel this violation 
of our users privacy (and a security concern).

-- 
Jakub Wilk





More information about the Python-modules-team mailing list