Bug#876241: debian-policy: Produce HTML output that doesn't try to load any JavaScript

[Russ Allbery]

Sean Whitton  writes:

> Per the discussion in #871944, at least for now we intend the version of
> Policy published on www.debian.org to be free of JavaScript.  So we need
> to include a JavaScript-free version in our package.

For what it's worth, I feel like avoiding Javascript here is excessively
conservative.  I'd prefer one of the solutions that pulls the Javascript
from the current Debian unstable packages.  Given the small use that
Sphinx makes of it, I find it unlikely that there will be any practical
security issues with this.

-- 
Russ Allbery (r...@debian.org)   

Bug#876241: debian-policy: Produce HTML output that doesn't try to load any JavaScript

[Sean Whitton]

Package: debian-policy
Version: 4.1.0.0
Severity: normal
Control: block 871944 by -1
User: debian-pol...@packages.debian.org
Usertags: packaging

Per the discussion in #871944, at least for now we intend the version of
Policy published on www.debian.org to be free of JavaScript.  So we need
to include a JavaScript-free version in our package.

Assuming that search is the only use made of JavaScript by Sphinx, here
is somewhere to start:
https://stackoverflow.com/questions/31951553/customizing-sphinx-to-avoid-generating-search-box

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages debian-policy depends on:
ii  libjs-sphinxdoc  1.5.6-2

debian-policy recommends no packages.

Versions of packages debian-policy suggests:
pn  doc-base  

-- no debconf information

-- 
Sean Whitton


signature.asc
Description: PGP signature