> On Dec 31, 2017, at 07:25, Henk P. Penning wrote:
>
>
> I don't see how such a change can be kept local ;
> how can it /not/ propagate to downstream mirrors?
If the JSON file was named using the mirror hostname then index.html can
extract the name from the URL and it wouldn’t matter if the
On 1 January 2018 at 17:57, Elaine Ashton wrote:
> On Jan 1, 2018, at 5:20 PM, Henk P. Penning wrote:
>
> I don't understand the "slippery slope".
> Where is the "slope", and why is it "slippery" ?
> -- the "how to add a sponsor logo/link" has been around for years
> -- CPAN's home-page alr
> On Jan 1, 2018, at 5:20 PM, Henk P. Penning wrote:
>
> I don't understand the "slippery slope".
> Where is the "slope", and why is it "slippery" ?
> -- the "how to add a sponsor logo/link" has been around for years
> -- CPAN's home-page already uses javascript
> How is adding 1 javascri
On Sun, 31 Dec 2017, Elaine Ashton wrote:
Date: Sun, 31 Dec 2017 15:58:37 +0100
From: Elaine Ashton
To: Henk P. Penning
Cc: Elaine -HFB- Ashton , Robert ,
Ask Bjørn Hansen , cpan-workers
Subject: Re: sponsor logo on home of CPAN mirror
On Dec 31, 2017, at 2:37 PM, Henk P
> On Dec 31, 2017, at 2:37 PM, Henk P. Penning wrote:
>
> I agree ; I just don't like the current rules, which suggest users
> tamper with "/index.html". I want clean rules and a clean method
> when dealing with (prospective) mirrors.
>
> I can find only one site that adds a logo ; and it
On Sun, 31 Dec 2017, Elaine Ashton wrote:
Date: Sun, 31 Dec 2017 12:12:06 +0100
From: Elaine Ashton
To: Henk P. Penning
Cc: Elaine -HFB- Ashton , Robert ,
Ask Bjørn Hansen , cpan-workers
Subject: Re: sponsor logo on home of CPAN mirror
Ok ; here is the same thing with a /local
> On Dec 31, 2017, at 12:52 PM, Henk P. Penning wrote:
>
> Ok ; here is the same thing with a /local/site.json file,
> instead of a /local/site.js file :
>
>http://cpan.cs.uu.nl/ondex2.html
>
> View the page's source for javascript code and user instructions.
>
> I think I prefer hav
On Sun, 31 Dec 2017, Robert wrote:
Date: Sun, 31 Dec 2017 09:21:26 +0100
From: Robert
To: Ask Bjørn Hansen
Cc: Henk P. Penning , cpan-workers
Subject: Re: sponsor logo on home of CPAN mirror
Encouraging mirrors to inject code is a very bad idea from a security
perspective. I agree with Ask
Encouraging mirrors to inject code is a very bad idea from a security
perspective. I agree with Ask that allowing them to inject config is safer
but is still a slippery slope.
On Sat, Dec 30, 2017 at 9:58 PM, Ask Bjørn Hansen wrote:
> Rather than having it execute javascript that’s locally modi
On Sun, 31 Dec 2017, Ask Bjørn Hansen wrote:
Date: Sun, 31 Dec 2017 06:58:48 +0100
From: Ask Bjørn Hansen
To: Henk P. Penning
Cc: cpan-workers
Subject: Re: sponsor logo on home of CPAN mirror
Rather than having it execute javascript that’s locally modified,
maybe we could have it just load
Rather than having it execute javascript that’s locally modified, maybe we
could have it just load some JSON?
I know that the mirror can technically change anything, so this is not really a
technical argument.
I think it’s important to maintain a stance that it’s unacceptable to change
anythi
Henk P. Penning wrote:
> -- add a javascript function "hostedby()"
> -- add an empty in the "footer_mirror" section
I certainly approve of only showing the logo to people who run JavaScript.
-zefram
Hi,
CPAN mirror sites sometimes want to add some sponsor info
to the mirrored CPAN home page. This is allowed, but the
documented[1] method is vague and not elegant.
I propose we fix this ; see (the source of) :
http://cpan.cs.uu.nl/ondex.html
Changes :
-- add ""
-- add a ja
13 matches
Mail list logo
