diff options
| author | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-02-19 23:42:46 +0000 |
|---|---|---|
| committer | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-02-19 23:42:46 +0000 |
| commit | 7884f69eaf4eb7416306a47c3bcb7d717443ac56 (patch) | |
| tree | d8a62d4a9b4172be72fcf6c67a5d345465f85f78 /doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn | |
| parent | 3c8002ebe006e0934cadb4f1c8ee54ff56a3d816 (diff) | |
| download | ikiwiki-7884f69eaf4eb7416306a47c3bcb7d717443ac56.tar ikiwiki-7884f69eaf4eb7416306a47c3bcb7d717443ac56.tar.gz | |
* Add a openidlogin-bg.gif to wikiicons and have the stylesheet use it for the
OpenID login form rather than linking to a remote logo, to avoid various
issues. Since there is not yet a license for the actual OpenID logo, this
file is currently a blank image. Users who want to can copy
http://openid.net/login-bg.gif into their wiki.
Diffstat (limited to 'doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn')
| -rw-r--r-- | doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn | 20 |
1 files changed, 19 insertions, 1 deletions
diff --git a/doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn b/doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn index 832ae8363..561cd6771 100644 --- a/doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn +++ b/doc/bugs/Please_don__39__t_refer_to_offsite_openid_image.mdwn @@ -1 +1,19 @@ -In style.css, please don't refer to the OpenID image on an external site. This reference allows that site to track users of ikiwikis and other sites supporting OpenID. Furthermore, this reference also opens up cross-site scripting vulnerabilities if the external site did something malicious. If the image has a Free Software license, please include it in ikiwiki, in the basewiki (preferably converted from gif to png). If the image does not have a Free Software license, please omit it, and allow users to choose to add it to their CSS themselves if they find the risks acceptable. --[[JoshTriplett]]
\ No newline at end of file +In style.css, please don't refer to the OpenID image on an external site. +This reference allows that site to track users of ikiwikis and other sites +supporting OpenID. Furthermore, this reference also opens up cross-site +scripting vulnerabilities if the external site did something malicious. If +the image has a Free Software license, please include it in ikiwiki, in the +basewiki (preferably converted from gif to png). If the image does not +have a Free Software license, please omit it, and allow users to choose to +add it to their CSS themselves if they find the risks acceptable. +--[[JoshTriplett]] + +> I wasn't able to get a clear statement of the license of that graphic, +> back when I was writing the openid support although I didn't try very hard +> (asked on irc on their irc channel, didn't seem to get anyone who was +> familiar with DFSG). Googling around, they seem to have not yet decided +> on a license: +> <http://openid.net/pipermail/general/2007-January/001421.html> +> <http://lists.danga.com/pipermail/yadis/2005-June/000990.html> +> +> Changed things around .. [[bugs/done]] --[[Joey]] |