[tor-bugs] #18271 [Website]: move <script> from wml files to separate js files

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#18271: move <script> from wml files to separate js files
-----------------------------+-----------------------
     Reporter:  arma         |      Owner:  Sebastian
         Type:  enhancement  |     Status:  new
     Priority:  Medium       |  Milestone:
    Component:  Website      |    Version:
     Severity:  Normal       |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |    Sponsor:
-----------------------------+-----------------------
 Right now we have <script> tags mixed with our other html in the wml files
 on the website.

 Weasel believes that if we move the scripts to their own separate .js
 files, then we could enable a Content-Security-Policy header with script-
 src 'self', thus making it harder for xss injections.

 This seems like a wise step to take.

 Affected files include (and I think are limited to):
 en/index.wml
 donate/en/donate.wml
 donate/en/donate-amazon.wml
 docs/en/debian.wml
 download/en/download-easy.wml
 download/en/download.wml
 docs/torbutton/en/index.wml

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18271>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs