From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Corwin Brust Newsgroups: gmane.emacs.bugs Subject: bug#69132: [ELPA] Remove jQuery from elpa.gnu.org Date: Sat, 17 Feb 2024 22:07:56 -0600 Message-ID: References: <87jzn6g7ep.fsf@posteo.net> <87h6iap2lz.fsf@posteo.net> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="8080"; mail-complaints-to="usenet@ciao.gmane.io" Cc: philipk@posteo.net, 69132@debbugs.gnu.org, Stefan Monnier To: rms@gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sun Feb 18 05:08:58 2024 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1rbYU6-0001sD-0o for geb-bug-gnu-emacs@m.gmane-mx.org; Sun, 18 Feb 2024 05:08:58 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rbYTs-0001kR-Ks; Sat, 17 Feb 2024 23:08:44 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rbYTq-0001kH-Fl for bug-gnu-emacs@gnu.org; Sat, 17 Feb 2024 23:08:42 -0500 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rbYTq-0004N0-5o for bug-gnu-emacs@gnu.org; Sat, 17 Feb 2024 23:08:42 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rbYUA-00068a-53 for bug-gnu-emacs@gnu.org; Sat, 17 Feb 2024 23:09:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Corwin Brust Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 18 Feb 2024 04:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 69132 X-GNU-PR-Package: emacs Original-Received: via spool by 69132-submit@debbugs.gnu.org id=B69132.170822931523561 (code B ref 69132); Sun, 18 Feb 2024 04:09:02 +0000 Original-Received: (at 69132) by debbugs.gnu.org; 18 Feb 2024 04:08:35 +0000 Original-Received: from localhost ([127.0.0.1]:34053 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rbYTj-00067w-02 for submit@debbugs.gnu.org; Sat, 17 Feb 2024 23:08:35 -0500 Original-Received: from mail-ot1-f47.google.com ([209.85.210.47]:42208) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rbYTh-00067i-5S for 69132@debbugs.gnu.org; Sat, 17 Feb 2024 23:08:33 -0500 Original-Received: by mail-ot1-f47.google.com with SMTP id 46e09a7af769-6ddca59e336so1809912a34.0 for <69132@debbugs.gnu.org>; Sat, 17 Feb 2024 20:08:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1708229287; x=1708834087; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=yxKT7r1zkDHQztORmFwOeSZv9FWB/LDOT8Rx6YosQO0=; b=Elk0pi2ikcOc0WsJmUI2n5ahYL+Tk4VJ3nRhXVKW4e4PncVRyyKU8a1NovjUMDx/dS 6hAlJwq/xMhxVNiE71cQNbtlS2DCqUTNu7jiyXuCsn8TUnuM/5H+zBFQskuzmMtW7bHa y7QgZtTFBmTevDqMRb9FKAez8KvqO9x4UnP7NZL7kXGIqT6TAak4xLbXIfDLNGMHw97H 8p+KokaaFi7w0LCJGnJLniwg2JArhcCYKij4o7TYvpYeSWTPVAAxq2aRM3l20NcTBQWl 16s7pvK9VfYVxG/UpGjO1bBpbqd6pHzGodTPPBUivAMjFJOC81P092ky7DGr0fx+WRzO 3i6g== X-Forwarded-Encrypted: i=1; AJvYcCVmlFhwZQALyxD/hZOAiIQURmxHF6DTRnjSuF+gLeC4DEbNFZNeBQpchYAFRhtRzW/T8sJ7JGw1bQ0FBPtPCa82RfJJZyE= X-Gm-Message-State: AOJu0YyeamrK5B+kyNOQ7TsbEgRXs/UH4cGUPNFxW35le7Ezg4VlrVt7 HM8RimShHyJPezgE1/sNloCGUkCUVQzdlyMVQLTg2rH55HIhsf6Waq3Vq1t6ZriO0Z+xgfxhtdj t+TWmNGGTYCp6rhM9BRSqmpGV/TU= X-Google-Smtp-Source: AGHT+IHB2wBRjqbELu9V1bVHKNWhPXgcMTdt1+95XfREtwvjmflBgJF6OHh8yB3roMkRCvrPsQ6pcgUajO3WOtDQi6c= X-Received: by 2002:a05:6830:1001:b0:6e2:e5ee:e29f with SMTP id a1-20020a056830100100b006e2e5eee29fmr3345725otp.7.1708229287105; Sat, 17 Feb 2024 20:08:07 -0800 (PST) In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:280156 Archived-At: On Sat, Feb 17, 2024 at 9:28=E2=80=AFPM Richard Stallman wrot= e: > > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > There is no special harm in using jquery. It is free software, > However, can we make elpa.gnu.org use NO Javascript? > That would be better. > In essence: No, it's not possible. Given someone thought they'd use it, we could add an additional option (radio button, or smth) that would case the search to happen on the server instead of via client-side script. That said, there are several reasons I feel it would be tragic to /replace/ a client side function with a server side one, in this case. Threeish paragraphs on that and the fine one back to OPs point, I think. Currently the websites for the ELPAs provide the ability to filter the full package list that is displayed initially when (e.g.) this page loads: As stated: I think it is *not* possible to perform this type of "client-side" search without using Javascript. It would likely be simple to create a search program on the web-server, however in this case that actually makes it slightly harder for users to see the search code involved (and way, way harder for them to change it, for themselves). The javascript must be sent to the user-agent to be evaluated, after all. In fact, this often means a user can, in addition to viewing and saving the sources, use the javascript console and other so-called "developer tools". Developer tools are provided in some form by a variety of popular browsers such as Firefox and the Chromium line, among others. Using these it is often possible to redefine functions and such before (e.g.) pressing a search button. At present, users who don't allow javascript execution must use the browser's search-within-page functions then iterate the results, which is just what I typically do when I'm looking for something with the `list-packages' UI, so it should be familiar even to those not using an in-emacs browser such as eww. So, I think the status quo is fine, notwithstanding removing jquery. In that regard, I think the argument was we don't use it enough considering it's a fairly big javascript library to send to every user that loads the page; given I've understood properly, I do agree.