From dev-return-8962-archive-asf-public=cust-asf.ponee.io@allura.apache.org Thu Nov 1 16:08:56 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id AFCD0180652 for ; Thu, 1 Nov 2018 16:08:55 +0100 (CET) Received: (qmail 23336 invoked by uid 500); 1 Nov 2018 15:08:54 -0000 Mailing-List: contact dev-help@allura.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@allura.apache.org Delivered-To: mailing list dev@allura.apache.org Received: (qmail 23320 invoked by uid 99); 1 Nov 2018 15:08:54 -0000 Received: from mail-relay.apache.org (HELO mailrelay2-lw-us.apache.org) (207.244.88.137) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Nov 2018 15:08:54 +0000 Received: from allura-vm2.apache.org (unknown [62.210.60.238]) by mailrelay2-lw-us.apache.org (ASF Mail Server at mailrelay2-lw-us.apache.org) with ESMTPS id 3DE0825F7 for ; Thu, 1 Nov 2018 15:08:53 +0000 (UTC) Received: from [172.18.0.10] (unknown [172.18.0.10]) by allura-vm2.apache.org (ASF Mail Server at allura-vm2.apache.org) with ESMTPS id 57759A003D for ; Thu, 1 Nov 2018 15:08:51 +0000 (UTC) Content-Type: multipart/related; boundary="===============0725437712575184692==" MIME-Version: 1.0 To: dev@allura.apache.org From: "Dave Brondsema" Reply-To: "[allura:tickets] " <8261@tickets.allura.p.forge-allura.apache.org> Subject: [allura:tickets] #8261 Embed youtube videos without cookies Message-ID:

Date: Thu, 01 Nov 2018 15:08:51 -0000 Sender: tickets@allura.p.forge-allura.apache.org In-Reply-To: <5bdaf624c829180eb5bee2ce.tickets@allura.p.forge-allura.apache.org> References: <5bdaf624c829180eb5bee2ce.tickets@allura.p.forge-allura.apache.org> --===============0725437712575184692== Content-Type: multipart/alternative; boundary="===============4262659082585493872==" MIME-Version: 1.0 --===============4262659082585493872== MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I like the idea of using youtube-nocookie.com. I think making the changes in macro.py and utils.py (and tests probably) is the right way to go. Iframes are only possible using the `[[embed` macro, project admins can't add a youtube.com iframe themselves. So I think the types of you changes you describe will handle the embed macro and that'll be good. --- ** [tickets:#8261] Embed youtube videos without cookies** **Status:** open **Milestone:** unreleased **Created:** Thu Nov 01, 2018 12:48 PM UTC by Ingo **Last Updated:** Thu Nov 01, 2018 12:48 PM UTC **Owner:** nobody Embedded youtube videos are trackers, as they are storing coockies for a foreign host. With the new european GDPR that's a problem. Currently I patched macros.py and utils.py to patch the URL: ~~~ embed_url = html.find('iframe').get('src').replace("youtube.com", "youtube-nocookie.com") ~~~ But I don't know what the correct solution for this problem might be. At least we need to allow the nocookie URLs if the user adds those. But I guess that's not enough, as I don't think that you can't easily pass the responsibility for trackers on project pages to the admin of the page. --- Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list. --===============4262659082585493872== MIME-Version: 1.0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: 7bit

I like the idea of using youtube-nocookie.com. I think making the changes in macro.py and utils.py (and tests probably) is the right way to go. Iframes are only possible using the [[embed macro, project admins can't add a youtube.com iframe themselves. So I think the types of you changes you describe will handle the embed macro and that'll be good.

[tickets:#8261] Embed youtube videos without cookies

Status: open
Milestone: unreleased
Created: Thu Nov 01, 2018 12:48 PM UTC by Ingo
Last Updated: Thu Nov 01, 2018 12:48 PM UTC
Owner: nobody

Embedded youtube videos are trackers, as they are storing coockies for a foreign host. With the new european GDPR that's a problem. Currently I patched macros.py and utils.py to patch the URL:

embed_url = html.find('iframe').get('src').replace("youtube.com", "youtube-nocookie.com")

But I don't know what the correct solution for this problem might be. At least we need to allow the nocookie URLs if the user adds those. But I guess that's not enough, as I don't think that you can't easily pass the responsibility for trackers on project pages to the admin of the page.

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.

--===============4262659082585493872==-- --===============0725437712575184692==--