[tahoe-lafs-trac-stream] [Tahoe-LAFS] #1942: replace google chart in wui with d3.js: it leaks information

Tahoe-LAFS trac at tahoe-lafs.org
Fri Sep 2 23:34:19 UTC 2016


#1942: replace google chart in wui with d3.js: it leaks information
-------------------------+-------------------------------------------------
     Reporter:  leif     |      Owner:  nobody
         Type:  task     |     Status:  new
     Priority:  normal   |  Milestone:  1.12.0
    Component:  code-    |    Version:  1.9.2
  frontend-web           |   Keywords:  anonymity privacy security websec
   Resolution:           |  tor-protocol i2p
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by Brian Warner <warner@…>):

 In [changeset:"ed91398a3f7da1f0c896c94a2ca8e68ddf4044a3/trunk"
 ed91398/trunk]:
 {{{
 #!CommitTicketReference repository="trunk"
 revision="ed91398a3f7da1f0c896c94a2ca8e68ddf4044a3"
 WUI: disable google timing chart on mapupdate page

 The google image chart API has been deprecated since 2012, sending the
 URL to google leaks server IDs and the client's IP address (especially
 important when the client is otherwise behind Tor), and the X-axis has
 no units anyways.

 refs ticket:1942 , which is both about removing the URL-based chart, and
 eventually replacing it with a browser-rendered d3.js-based one
 }}}

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1942#comment:19>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list