511530 - MDC references scripts and CSS on scripts.mindtouch.com

Status: RESOLVED FIXED

(developer.mozilla.org Graveyard :: General, defect)

Description

[Mike Shaver (:shaver emeritus)]

Pretty sure we don't want to be dependent on mindtouch servers, or vulnerable to auth stealing attacks due to a breach of their machine.  Rather sure that we don't want to include http from https, since it sort of defeats the point of doing https in the first place!

From the bottom of the page:

  <link type="text/css" rel="stylesheet" href="http://scripts.mindtouch.com/res/syntax/SyntaxHighlighter.css" /><script type="text/javascript" src="http://scripts.mindtouch.com/res/syntax/shCore.js"></script><script type="text/javascript" src="http://scripts.mindtouch.com/res/syntax/shBrushXml.js"></script><script type="text/javascript" src="http://scripts.mindtouch.com/res/syntax/shBrushJScript.js"></script>

Comment 1

[Eric Shepherd [:sheppy]]

We can get the scripts into our own space by pulling from:

https://svn.mindtouch.com/source/public/dekiwiki/trunk/src/services/Scripts/

They recommend pulling them into /deki (that is, they obviously need to be web-accessible). Once we have them in place, let me know what their URL path is so I can update our configuration, and we'll be using them instead (after a wiki restart).

Comment 2

[John Karahalis [:openjck]]

Replaced Mindtouch with Kuma. Marking as fixed.