[med-svn] [r-cran-xml2] 05/06: Avoid privacy breaching HTML

Fri Oct 13 07:51:47 UTC 2017

This is an automated email from the git hooks/post-receive script.

tille pushed a commit to branch master
in repository r-cran-xml2.

commit 0594216869610aa87678d1b5ad6167516f486397
Author: Andreas Tille <tille at debian.org>
Date:   Fri Oct 13 09:43:04 2017 +0200

    Avoid privacy breaching HTML
---
 debian/changelog                    |  7 +++++++
 debian/control                      |  4 +++-
 debian/patches/privacy_breach.patch | 24 ++++++++++++++++++++++++
 debian/patches/series               |  1 +
 4 files changed, 35 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 7db8b0d..f0aded6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,13 @@ r-cran-xml2 (1.1.1-1) UNRELEASED; urgency=medium
   * New upstream version
   * Moved packaging from SVN to Git
   * Standards-Version: 4.1.1
+  * Instead of providing privacy breaching html pointing to external JS
+    files packaged versions are used.  The two JS in question will be
+    provided by packages libjs-twitter-bootstrap, r-cran-shiny.  Since
+    r-cran-shiny pulls a lot of other R packages it is added as Suggests
+    to not bloat users system for the only reason to support outdated
+    IE browsers.  libjs-twitter-bootstrap is added as Recommends since
+    it does not have so heavy dependencies.
 
  -- Andreas Tille <tille at debian.org>  Fri, 13 Oct 2017 09:17:02 +0200
 
diff --git a/debian/control b/debian/control
index 7d27c71..0c50c44 100644
--- a/debian/control
+++ b/debian/control
@@ -21,7 +21,9 @@ Depends: ${misc:Depends},
          ${shlibs:Depends},
          ${R:Depends}
 Recommends: ${R:Recommends}
-Suggests: ${R:Suggests}
+         libjs-twitter-bootstrap
+Suggests: ${R:Suggests},
+          r-cran-shiny
 Description: GNU R XML parser
  This GNU R package works with XML files using a simple, consistent
  interface. Built on top of the 'libxml2' C library.
diff --git a/debian/patches/privacy_breach.patch b/debian/patches/privacy_breach.patch
new file mode 100644
index 0000000..aca3627
--- /dev/null
+++ b/debian/patches/privacy_breach.patch
@@ -0,0 +1,24 @@
+Description: Avoid privacy breaching HTML
+    Instead of providing privacy breaching html pointing to external JS
+    files packaged versions are used.  The two JS in question will be
+    provided by packages libjs-twitter-bootstrap, r-cran-shiny.  Since
+    r-cran-shiny pulls a lot of other R packages it is added as Suggests
+    to not bloat users system for the only reason to support outdated
+    IE browsers.  libjs-twitter-bootstrap is added as Recommends since
+    it does not have so heavy dependencies.
+Author: Andreas Tille <tille at debian.org>
+Last-Update: Fri, 13 Oct 2017 09:17:02 +0200
+
+--- a/inst/extdata/r-project.html
++++ b/inst/extdata/r-project.html
+@@ -16,8 +16,8 @@
+     <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
+     <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
+     <!--[if lt IE 9]>
+-      <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
+-      <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
++      <script src="file:///usr/share/twitter-bootstrap/files/html5shiv/html5shiv.min.js"></script>
++      <script src="file:///usr/lib/R/site-library/shiny/www/shared/bootstrap/shim/respond.min.js"></script>
+     <![endif]-->
+   </head>
+   <body>
diff --git a/debian/patches/series b/debian/patches/series
index 450a5f3..de3743d 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
 use_debian_packages_boost.patch
+privacy_breach.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/r-cran-xml2.git

