Add a New Comment (Rich Markup)
comment #2:
> This is the part I'm referring to: > > var d=document, g=d.createElement("script"), s=d.getElementsByTagName("script")[0]; g.type="text/javascript"; > g.defer=true; g.async=true; g.src=u+"piwik.js"; s.parentNode.insertBefore(g,s); > > That code dynamically inserts a <script> tag into the DOM, and I believe that LibreJS isn't checking that script. >
This is surprising, as the stream filter should be able to intercept any scripts requested by the site. Do you by any chance have a more complete example (e.g. a webpage where librejs fails like this)?
This is the part I'm referring to: var d=document, g=d.createElement("script"), s=d.getElementsByTagName("script")[0]; g.type="text/javascript"; g.defer=true; g.async=true; g.src=u+"piwik.js"; s.parentNode.insertBefore(g,s); That code dynamically inserts a <script> tag into the DOM, and I believe that LibreJS isn't checking that script.
original submission:
> On this page: <https://static.fsf.org/nosvn/demos/matomo/>, Matomo's JS inserts a script tag that links to a JS file that is supported by LibreJS. However the script is not mentioned in LibreJS' report, which leads me to believe that it doesn't check the license of that script. >
Do you mean the following script? It is accepted by LibreJS in my test. Could you confirm whether it is still not tracked by LibreJS? <script type="text/javascript">/* LibreJS: script accepted. */ // @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-2.0-or-later var _paq = _paq || []; _paq.push(["trackPageView"]); _paq.push(["enableLinkTracking"]); (function() { var u = (("https:" == document.location.protocol) ? "https" : "http") + "://"+"matomo1p.fsf.org//"; _paq.push(["setTrackerUrl", u+"piwik.php"]); _paq.push(["setSiteId", "18"]); var d=document, g=d.createElement("script"), s=d.getElementsByTagName("script")[0]; g.type="text/javascript"; g.defer=true; g.async=true; g.src=u+"piwik.js"; s.parentNode.insertBefore(g,s); })(); // @license-end</script>
On this page: <https://static.fsf.org/nosvn/demos/matomo/>, Matomo's JS inserts a script tag that links to a JS file that is supported by LibreJS. However the script is not mentioned in LibreJS' report, which leads me to believe that it doesn't check the license of that script.
(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)
Attach Files: Comment:
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Only logged-in users can vote.
Please enter the title of George Orwell's famous dystopian book (it's a date):
Follow 3 latest changes.
Copyright © 2023 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team. Source Code
Powered by Savane 3.11