As per lintian report for the following file: https://framagit.org/hubzilla/core/blob/master/library/ace/snippets/html.js :
library/ace/snippets/html.js[<object width="$2" height="$3" classid="clsid:02bf25d5-8c17-4b23-bc80-d3488abddc6b"\n? codebase="http://www.apple.com/qtactivex/qtplugin.cab">\] (http://www.apple.com/qtactivex/qtplugin.cab)
This package creates a potential privacy breach by fetching data from an external website at runtime. Please remove these scripts or external HTML resources.
Please replace any scripts, images, or other remote resources with non-remote resources. It is preferable to replace them with text and links but local copies of the remote resources are also acceptable as long as they don't also make calls to remote services. Please ensure that the remote resources are suitable for Debian main before making local copies of them.
Also this file appears to be pre-minified. Please consider shipping the original human-readable/editable source.