help-librejs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-librejs] LibreJS blocks jquery, angular and bootstrap.


From: Tony França
Subject: Re: [Help-librejs] LibreJS blocks jquery, angular and bootstrap.
Date: Mon, 30 Sep 2013 10:25:56 -0300

Great, thanks!

ctrl+/ works!
Suggestion: add this instruction on the right hand warning:

"To see LibreJS full report, enable Add-on bars with CTRL + /
or from the menu, view > toolbars > addon bars"

I'll work on the scripts, thanks!




On Mon, Sep 30, 2013 at 10:19 AM, Loic J. Duros <address@hidden> wrote:

Try CTRL + /
or from the menu, view > toolbars > addon bars
Does the LibreJS widget show up at the bottom after this?

For the jquery file, I think it's due to the fact the version is
unrecognized by LibreJS, that is, we don't have a hash for it in the
list. From what I understand this is a non-minified version and I don't
think we have the SHA1 hashes for those.

The easiest thing to do would be to use the @license [magnet-link]
@license-end method that is described here:
http://www.gnu.org/software/librejs/free-your-_javascript_.html#magnet-link-license

Please let me know if you can add this to the scripts you have with the
proper license link, and it should deal with your issue.

Loic


Tony França <address@hidden> writes:

> As it turns out the the title is correct indeed :P
>
> I tested again on another computer, and got blocked.
> (Complete LibreJS report below)
> So, it's really complaining about jquery and some other stuff.
>
> Back on my computer, I found out that I had freedomsponsors.org
> whitelisted so that's why it stopped complaining (silly me).
>
> Now, another problem I'm having is: on my computer, I get the right
> hand bar that says, "Non-free, compain, etc", but I don't see the
> bottom bar with the icon that opens LibreJS report.
>
> Please help :-)
>
> Thanks
> Tony
>
> ------------------------------------------
> List of blocked Java in http://freedomsponsors.org/
>
> NONTRIVIAL: Creates an xhr object:
> http://freedomsponsors.org/static/bootstrap/js/jquery.js
> NONTRIVIAL: eval has been found in code:
> http://freedomsponsors.org/static/bootstrap/js/showdown.js
>
> This is detected as inline, nonfree, defining functions or methods,
> and the rest of the page as loading external s:
> if (typeof String.prototype.startsWith != 'function') {
> String.prototype.startsWith = function (str){
> return this.indexOf(str) == 0;
> };
> }
>
> NONTRIVIAL: creates element dynamically.:
> var pkBaseURL = (("https:" == document.location.protocol) ?
> "https://piwik-tonylampada.rhcloud.com/" :
> "http://piwik-tonylampada.rhcloud.com/");
> document.write(unescape("%3C src="" + pkBaseURL + "piwik.js' type='text/java'%3E%3C/%3E")
> );
>
> This is detected as inline, nonfree, defining functions or methods,
> and the rest of the page as loading external s:
> try {
> var piwikTracker = Piwik.getTracker(pkBaseURL + "piwik.php", 1);
> piwikTracker.trackPageView();
> piwikTracker.enableLinkTracking();
> } catch( err ) {}
>
> This is detected as inline, nonfree, defining functions or methods,
> and the rest of the page as loading external s:
> $(function(){
> var $trackerURL = $('#trackerURL');
> var _trackerURL = document.getElementById('trackerURL');
> var $operation = $('#operation');
> var _the_form = document.getElementById('the_form');
> var _btnSponsor = document.getElementById('btnSponsor');
> var _btnKickstart = document.getElementById('btnKickstart');
>
> var validate_form = function(){
> var urlVal = $trackerURL.val();
> if(!urlVal){
> alert('Please type an issue URL');
> return false;
> }
> return true;
> }
>
> var sponsor_onclick = function(){
> if(validate_form()){
> $operation.val('SPONSOR')
> _the_form.submit();
> }
> return false;
> };
>
> var kickstart_onclick = function(){
> if(validate_form()){
> $operation.val('KICKSTART')
> _the_form.submit();
> }
> return false;
> };
>
> var trackerURL…
>
> This is detected as inline, nonfree, defining functions or methods,
> and the rest of the page as loading external s:
> $(function(){
> $('.popopo').popover({trigger:'hover'})
> $(".popopo_stay")
> .popover({
> offset: 10,
> trigger: 'manual',
> animate: false,
> html: true,
> placement: 'left',
> template: '<div class="popover" > > (function() {$(this).hide(); });"><div class="arrow"></div><div
> class="popover-inner"><h3 class="popover-title"></h3><div
> class="popover-content"><p></p></div></div></div>'
>
> }).click(function(e) {
> e.preventDefault() ;
> }).mouseenter(function(e) {
> $(this).popover('show');
> });
> });
>
> NONTRIVIAL: eval has been found in code:
> http://freedomsponsors.org/static/bootstrap/js/bootstrap.js
> NONTRIVIAL: eval has been found in code:
> http://freedomsponsors.org/static/bootstrap/js/bootstrap-typeahead.js
>
> List of accepted Java in http://freedomsponsors.org/
>
> LibreJS did not allow the execution of any on this page: '
> There may be no on this page (check source, C-u)
> The inline and on-page Java code may not be free and/or may not have
> proper license information and external s (if present) may have been
> removed by default.
> External s may not be free and/or may not have proper licensing and
> are not part of the whitelist of free Java libraries.
>
> On Sun, Sep 22, 2013 at 10:54 AM, Tony França <address@hidden>
> wrote:
>
>     Oh, and sorry about the misleading title.
>     I noticed that LibreJS was not blocking my site after I started
>     writing the email, and forgot to change it :P.
>
>
>
>
>
>     On Sun, Sep 22, 2013 at 9:57 AM, Tony França
>     <address@hidden> wrote:
>
>
>
>         Hello LibreJS helpers!
>         My name is Tony, I'm founder of http://freedomsponsors.org, a
>         crowdfunding service for free software.
>
>
>
>         A week ago I was having trouble with LibreJS complaining about
>         my site.
>         But I tested it again today and LibreJS doesn't complain
>         anymore.
>
>
>         Can someone confirm that? (Navigate on a few links in
>         http://freedomsponsors.org and see that LibreJS does not show
>         a warning).
>
>
>         I'm curious: how does this happen? My guess is that LibreJS
>         looks at an online list of whitelisted _javascript_s - and that
>         list got updated past week. Is that how it works?
>
>
>         Thanks!
>         Tony Lâmpada
>
>
>
>         On Sun, Sep 22, 2013 at 5:52 AM, Richard Stallman
>         <address@hidden> wrote:
>
>         [I sent this message a week ago but did not get a response.]
>
>
>             [ To any NSA and FBI agents reading my email: please
>             consider
>             [ whether defending the US Constitution against all
>             enemies,
>             [ foreign or domestic, requires you to follow Snowden's
>             example.
>
>
>             FS still won't work with LibreJS (because of jquery.js and
>             bootstrap.js)
>
>
>
>             What is the problem with those? jquery is free software,
>             and LibreJS
>             should already recognize it as such. I don't know anything
>             about
>             bootstrap.js, but I am sure it can get fixed one way or
>             another.
>
>             If there is no easy way for you to DTRT, maybe LibreJS
>             needs to be changed
>             to make it easier. So I have cc'd Loic Duros, maintainer
>             of LibreJS.
>             Could the two of you please get this problem resolved?
>
>             --
>             Dr Richard Stallman
>             President, Free Software Foundation
>             51 Franklin St
>             Boston MA 02110
>             USA
>             www.fsf.org www.gnu.org
>             Skype: No way! That's nonfree (freedom-denying) software.
>             Use Ekiga or an ordinary phone call.
>
>
>
>
>
>


reply via email to

[Prev in Thread] Current Thread [Next in Thread]