[tahoe-lafs-trac-stream] [Tahoe-LAFS] #1942: replace google chart in wui with d3.js: it leaks information
Tahoe-LAFS
trac at tahoe-lafs.org
Fri Sep 2 23:34:19 UTC 2016
#1942: replace google chart in wui with d3.js: it leaks information
-------------------------+-------------------------------------------------
Reporter: leif | Owner: nobody
Type: task | Status: new
Priority: normal | Milestone: 1.12.0
Component: code- | Version: 1.9.2
frontend-web | Keywords: anonymity privacy security websec
Resolution: | tor-protocol i2p
Launchpad Bug: |
-------------------------+-------------------------------------------------
Comment (by Brian Warner <warner@…>):
In [changeset:"ed91398a3f7da1f0c896c94a2ca8e68ddf4044a3/trunk"
ed91398/trunk]:
{{{
#!CommitTicketReference repository="trunk"
revision="ed91398a3f7da1f0c896c94a2ca8e68ddf4044a3"
WUI: disable google timing chart on mapupdate page
The google image chart API has been deprecated since 2012, sending the
URL to google leaks server IDs and the client's IP address (especially
important when the client is otherwise behind Tor), and the X-axis has
no units anyways.
refs ticket:1942 , which is both about removing the URL-based chart, and
eventually replacing it with a browser-rendered d3.js-based one
}}}
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1942#comment:19>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list