Page 1 of 3 123 LastLast
Results 1 to 10 of 29

Thread: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

  1. #1
    heyjoe NNTP User

    Exclamation https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    I just visited https://software.opensuse.org and noticed that it is forcing me to enable some non-free JavaScript in order to use functions like "Show community packages".

    How is that justified along the lines of software freedom (and the PoC of Spectre and Meltdown demonstrated through using JavaScript)?

    How can we have an html only version please?

  2. #2
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    32,317
    Blog Entries
    15

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by heyjoe View Post
    I just visited https://software.opensuse.org and noticed that it is forcing me to enable some non-free JavaScript in order to use functions like "Show community packages".

    How is that justified along the lines of software freedom (and the PoC of Spectre and Meltdown demonstrated through using JavaScript)?

    How can we have an html only version please?
    Hi
    Contact the maintainers via https://en.opensuse.org/openSUSE:Heroes
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

  3. #3
    heyjoe NNTP User

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Thanks. There are quite a lot of links on that page. Which contact channels should I use? Or are you suggesting to email directly the people listed in the "Members" table?

  4. #4
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    32,317
    Blog Entries
    15

    Default Re: https://software.opensuse.org does not (quite) work withoutJavaScript any more. Why?

    On Wed 21 Mar 2018 12:36:01 PM CDT, heyjoe wrote:

    Thanks. There are quite a lot of links on that page. Which contact
    channels should I use? Or are you suggesting to email directly the
    people listed in the "Members" table?


    Hi
    I would try the IRC channel first...

    --
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    openSUSE Leap 42.3|GNOME 3.20.2|4.4.114-42-default
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!


  5. #5
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    13,295
    Blog Entries
    2

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    I ran a Tor browser which is FF with NoScript 5.1.8.4 installed, and I've explored several links on several pages without running into a forbidden script.

    I've also clicked on several "show community" and "show experimental" links in the package search pages without a problem. I did a cursory inspection what's on the page and it looks like pretty standard HTML5/CSS3/Javascript.

    If you're expecting a page without any javascript whatsoever, that's probably unreasonable in today's Web... You'd maybe want to point a browser with no javascript support at all directly at the repo directories instead of softeware.opensuse.org/search.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  6. #6
    Join Date
    Feb 2010
    Location
    Germany
    Posts
    4,552

    Question Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by heyjoe View Post
    I just visited https://software.opensuse.org and noticed that it is forcing me to enable some non-free JavaScript in order to use functions like "Show community packages".
    With the openSUSE Leap 42.3 standard browser: Firefox ESR Version 52.7.2 and the (Firefox standard) IcedTea-Web Java plugin:
    <https://software.opensuse.org>: Page information:
    Type: "text/html"; Meta (6 keywords):
    Code:
    IE=edge
    width=device-width, initial-scale=1
    text/html; charset=utf-8
    text/javascript
    text/css
    Checked a package (digiKam): the page's Type and Meta are just the same -- header of the page's source code is:
    Code:
    <!DOCTYPE html>
    <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
      <head>
        <meta charset="utf-8"/>
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <title>openSUSE Software</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <meta http-equiv="Content-Script-Type" content="text/javascript"/>
        <meta http-equiv="Content-Style-Type" content="text/css"/>
    
        <link rel="search" type="application/opensearchdescription+xml" title="openSUSE Software" href="/search_software.xml" />
    
        <link rel="stylesheet" media="screen" href="/chameleon/css/app.css" />
        <link rel="stylesheet" media="screen" href="/assets/app-78e83e964932d7d796e66dc9a32622ee7e98f9522cc94291771e9431151356b7.css" />
        <script src="/chameleon/js/app.js"></script>
        <link href="https://software.opensuse.org/favicon.ico" rel="shortcut icon" />
        <script src="/assets/application-f138ca00f631a013675d9ea487a7e5afc06839913e263c9992e1341aa8a1549a.js"></script>
    
        
    
        <script type="text/javascript">
          /* <=!=[=C=D=A=T=A=[ */
    So, questions:
    • Which browser are you using?
    • Can you determine why that browser is forcing you to install commercial (closed source) Java support?

  7. #7
    heyjoe NNTP User

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by tsu2 View Post
    If you're expecting a page without any javascript whatsoever, that's probably unreasonable in today's Web... You'd maybe want to point a browser with no javascript support at all directly at the repo directories instead of softeware.opensuse.org/search.
    The question is - how is it "reasonable" to enforce the user to run non-free software in order to download free software, considering the additional vulnerabilities mentioned.

    https://www.gnu.org/philosophy/javascript-trap.html

    I am not FSF fanatic but still obfuscated JS cannot be considered even open source in general. So this site now practically requires blindfolded trust from the visitor in order to use its functions. That's why I asked - how does this align with the whole idea of software freedom? Also who can guarantee that through this obfuscated JS someone cannot perform a Spectre attack (for example)? Even if that was possible one time, nobody can check if JS on the server was changed since last visit. So "today's web" is not merely something to accept ignoring actual PoC, on the contrary. For similar reasons I am working on new versions of all my own websites, respecting user's freedom. (just a side note)

    Quote Originally Posted by dcurtisfra View Post
    So, questions:
    • Which browser are you using?
    • Can you determine why that browser is forcing you to install commercial (closed source) Java support?
    chromium-65.0.3325.181-149.1.x86_64 with disabled
    Code:
    chrome://settings/content/cookies //// selectively enabled just for a few sites.
    chrome://settings/content/location
    chrome://settings/content/camera
    chrome://settings/content/microphone
    chrome://settings/content/notifications
    chrome://settings/content/javascript
    chrome://settings/content/flash
    chrome://settings/content/backgroundSync
    chrome://settings/content/automaticDownloads
    chrome://settings/content/unsandboxedPlugins
    chrome://settings/content/midiDevices
    chrome://settings/content/protectedContent
    chrome://settings/languages
    chrome://settings/cloudPrinters
    The browser is not forcing me to do anything. Java != JavaScript.

  8. #8
    Join Date
    Feb 2010
    Location
    Germany
    Posts
    4,552

    Question Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by heyjoe View Post
    The browser is not forcing me to do anything. Java != JavaScript.
    Is your suggestion, to move the openSUSE web presence to a "no JavaScript needed" HTML5 + CSS3 implementation?

  9. #9
    heyjoe NNTP User

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by dcurtisfra View Post
    Is your suggestion, to move the openSUSE web presence to a "no JavaScript needed" HTML5 + CSS3 implementation?
    Well, why not? So far it has been this way.

  10. #10
    Join Date
    Jun 2008
    Location
    Groningen, Netherlands
    Posts
    20,925
    Blog Entries
    14

    Default Re: https://software.opensuse.org does not (quite) work without JavaScript any more. Why?

    Quote Originally Posted by heyjoe View Post
    Well, why not? So far it has been this way.
    It hasn't. The old page was html+javascript, just like the current one. And migration to HTML5? That would need a huge team, with lots of time. And, who's going to do this?
    ° Appreciate my reply? Click the star and let me know why.

    ° Perfection is not gonna happen. No way.

    http://en.opensuse.org/User:Knurpht
    http://nl.opensuse.org/Gebruiker:Knurpht

Page 1 of 3 123 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •