From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) Subject: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript Date: Mon, 07 Oct 2013 22:02:06 +0200 Message-ID: <87zjqkvoht.fsf@gnu.org> References: <5415a2508dff305c041e20f08c20793e.squirrel@webmail.ouvaton.coop> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58026) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTH1G-0007RR-MP for bug-guix@gnu.org; Mon, 07 Oct 2013 16:03:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VTH1C-0001rW-Ar for bug-guix@gnu.org; Mon, 07 Oct 2013 16:03:06 -0400 Received: from debbugs.gnu.org ([140.186.70.43]:52708) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTH1C-0001rI-6x for bug-guix@gnu.org; Mon, 07 Oct 2013 16:03:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1VTH1B-0001I8-Sn for bug-guix@gnu.org; Mon, 07 Oct 2013 16:03:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <5415a2508dff305c041e20f08c20793e.squirrel@webmail.ouvaton.coop> (christophe jarry's message of "Mon, 7 Oct 2013 09:43:35 +0200") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org To: christophe.jarry@ouvaton.org Cc: 15549@debbugs.gnu.org Hi, christophe.jarry@ouvaton.org skribis: > If I go to http://hydra.gnu.org/jobset/gnu/master with Firefox, addon > GNU LibreJS 5.4 [1] reports this: Thanks for the report! > List of accepted JavaScript in > http://hydra.gnu.org/jobset/gnu/master > > this script has been tagged as free software by LibreJS authors: > http://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js > > > List of blocked JavaScript in > http://hydra.gnu.org/jobset/gnu/master > > NONTRIVIAL: eval has been found in code: > http://ajax.googleapis.com/ajax/libs/jqueryui/1.10.1/jquery-ui.min.js So jquery itself is free, but since it=E2=80=99s using =E2=80=98eval=E2=80= =99 it might be evaluating third-party non-free code, is that right? > NONTRIVIAL: eval has been found in code: > http://hydra.gnu.org/static/bootstrap/js/bootstrap.min.js Same here. > This script is detected as nonfree, external, and as defining > functions or methods: > http://hydra.gnu.org/static/js/bootbox.min.js That file points to http://bootboxjs.com/license.txt, which is the MIT/X11 license. So do I get it right that it=E2=80=99s just a matter of letting LibreJS know about it? > This script is detected as nonfree, external, and as defining > functions or methods: > http://hydra.gnu.org/static/js/common.js That file is actually part of Hydra, which is GPLv3+: https://github.com/NixOS/hydra/blob/master/src/root/static/js/common.js > This script is detected as inline, nonfree, defining functions or > methods, and the rest of the page as loading external scripts: > $(function() { makeLazyTab("tabs-jobs", > "http://hydra.gnu.org/jobset/gnu/master/jobs-tab"); }); This comes from Hydra=E2=80=99s source: https://github.com/NixOS/hydra/blob/master/src/root/jobset.tt > Is it possible to use only free javascript for this page? AFAICS it=E2=80=99s actually the case. However, all this lacks the right t= ags for LibreJS to recognize it. Could you tell us what=E2=80=99s needed to make it work? I can then submit a patch for Hydra itself. It would be neat if someone else would submit the JQuery/Bootstrap parts, though. Thanks, Ludo=E2=80=99.