Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
core
core
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 234
    • Issues 234
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 3
    • Merge Requests 3
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • hubzilla
  • corecore
  • Issues
  • #1442

Closed
Open
Opened Feb 01, 2020 by Dmitry Smirnov@onlyjob

[privacy-breach-uses-embedded-file] vendor/blueimp/jquery-file-upload

As discovered by Lintian:

privacy-breach-uses-embedded-file

  • vendor/blueimp/jquery-file-upload/cors/postmessage.html (https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js)
  • vendor/blueimp/jquery-file-upload/index.html (https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css)
  • vendor/blueimp/jquery-file-upload/index.html (https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js)
  • vendor/blueimp/jquery-file-upload/test/index.html (https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js)

This package creates a potential privacy breach by fetching data from an external website at runtime.
Please remove these scripts or external resources.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: hubzilla/core#1442