Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #11160 API Explorer should not download stylesheet from an external source
    Actions
    Infos
    #11160
    Thomas Gerbet (tgerbet)
    2018-02-16 19:30
    2018-02-16 14:21
    11497
    Details
    API Explorer should not download stylesheet from an external source
    Since request #10893 when accessing the API Explorer a stylesheet for FontAwesome is loaded from a CDN, Tuleap should avoid doing that.

    Not all the users browsing a Tuleap instance can access to outside their local network and we have no guarantee the downloaded stylesheet is always the same since subresource integrity [1] [2] is not used.

    [1] https://w3c.github.io/webappsec-subresource-integrity/
    [2] https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity
    API
    9.16
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2018-02-16
    Attachments
    Empty
    References
    Referencing request #11160

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/95/10595/3' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 7dc448733a
    User avatar Nicolas Terray (nterray) , 2018-02-16 19:32
    request #11160: API Explorer should not download stylesheet from an external source 725d7516a9
    User avatar Thomas Gerbet (tgerbet) , 2018-02-16 17:10
    Referenced by request #11160

    Artifact Tracker v5

    request #10893 Update Restler library
    rel #10968 9.18

    Other

    gerrit #10595
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2018-02-16 15:02
    A patch is under review: gerrit #10595.
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    • Status changed from Under implementation to Under review