Sean Whitton <spwhit...@spwhitton.name> writes: > Per the discussion in #871944, at least for now we intend the version of > Policy published on www.debian.org to be free of JavaScript. So we need > to include a JavaScript-free version in our package.
For what it's worth, I feel like avoiding Javascript here is excessively conservative. I'd prefer one of the solutions that pulls the Javascript from the current Debian unstable packages. Given the small use that Sphinx makes of it, I find it unlikely that there will be any practical security issues with this. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
