Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Avoid usage of third party CDN due to legal reasons #8

Open
pierres opened this issue Jan 30, 2022 · 0 comments
Open

Avoid usage of third party CDN due to legal reasons #8

pierres opened this issue Jan 30, 2022 · 0 comments

Comments

@pierres
Copy link

pierres commented Jan 30, 2022

Feature Request

Is your feature request related to a problem? Please describe.
Some first party extensions load resources from third party CDNs like jsdelivr. This might violate EU laws like GDPR. As these files can easily be hosted locally this puts Flarum hosters at unnecessary risc. See recent rulings like https://rewis.io/urteile/urteil/lhm-20-01-2022-3-o-1749320/ Note: I am not a lawyer and from a technical perspective I might not agree with such rulings.

This affects the following extensions:

  • flarum/emoji: https://cdn.jsdelivr.net/gh/twitter/twemoji
  • flarum/core, bbcode, markdown directly by usage of s9e/text-formatter which loads various ressources from jsdelivr like highlightjs (css and js) and s9e (js).

Describe the solution you'd like
By default Flarum should provide all necessary resources locally and not rely on third party hosts.

Justify why this feature belongs in Flarum's core, rather than in a third-party extension
This would require forking core components just to provide some additional files and a different CDN url. Actually utilizing a third party CDN should be provided by an extension and not the other way round.

@pierres pierres changed the title Avoid usage of third party CDN due to legal resons Avoid usage of third party CDN due to legal reasons Jan 30, 2022
@askvortsov1 askvortsov1 transferred this issue from flarum/framework Mar 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant