Couldn't this simply work with libjs-bootstrap4? Seems like using bootstrap4 would be a net improvement anyway, especially sicne it then wouldn't be encumbered by the open CVEs.
For me; it's a tentative ACK for the MIR provided the Security Team also ACKs it. I'm not looking for a full code-review -- I did that, nothing jumps out (but yeah, sure, XSS CVEs); but I think we ought to have a formal decision from the security team as to whether they are fine with this as-is; or as I think, that it would be *much* preferable to use twitter-bootstrap4. ** Changed in: twitter-bootstrap3 (Ubuntu) Status: New => In Progress ** Changed in: twitter-bootstrap3 (Ubuntu) Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Server (ubuntu-server) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1820226 Title: [MIR] twitter-bootstrap3 as dependency of mailman3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/twitter-bootstrap3/+bug/1820226/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs