[Repo-criteria-discuss] Gitea currently contains unrecognised JavaScript

[David Seaward]

Hi,

I performed a quick evaluation of Gitea (a community fork of Gogs).
This is a self-hosting solution, with a trial website running at https:
//try.gitea.io

Visiting the trial website with LibreJS revealed the following
problems. I suspect these are free JavaScript libraries, but they just
haven't been labelled as such. I've noted them at https://github.com/go
-gitea/gitea/issues/1524 (self-self-hosting is a future milestone).

I'll follow up if there's an indication that the Gitea community want
to continue the evaluation process.

Regards,
David

List of accepted JavaScript in https://try.gitea.io/

This script is detected as free
https://try.gitea.io/js/libs/jquery.are-you-sure.js

This script is detected as free
https://try.gitea.io/js/libs/emojify-1.1.0.min.js

This script is detected as free
https://try.gitea.io/js/libs/clipboard-1.5.9.min.js

List of blocked JavaScript in https://try.gitea.io/

This script is detected as nonfree, external, and as defining functions
or methods
https://try.gitea.io/js/libs/autolink.js

NONTRIVIAL: eval has been found in code
https://try.gitea.io/js/index.js?v=1ed9cef4e7846494bd7df1cc16ae65fc

NONTRIVIAL: Creates an xhr object
https://try.gitea.io/js/jquery-1.11.3.min.js

NONTRIVIAL: Creates an xhr object
https://try.gitea.io/js/semantic-2.2.1.min.js

Web Labels pages being used for this session

https://try.gitea.io/assets/librejs/librejs.html