Hello Benson,

as of now, this hasn't been an issue and I think there's no obstacle with using the javascript (the library has reported vulnerability AFAIR), but it's not exploitable in the documentation so it's deemed safe (the library should not be used for anything else).

The same goes for the font (if it's shipped in the package itself, it's probably fine to remove it, or state the license).

HIH,
Pavel

On Sat, Jun 25, 2022 at 6:35 AM Benson Muite <benson_muite@emailplus.org> wrote:
Hi,

Rdoc generated HTML often includes embedded fonts and javascript which
may be problematic to package. Might it be worth suggesting in the
packaging documentation[0] to only create Ri files which are accessible
on the command line? A related ticket that prompted this is [1].

Regards,
Benson

0] https://docs.fedoraproject.org/en-US/packaging-guidelines/Ruby/
1] https://bugzilla.redhat.com/show_bug.cgi?id=2097267
_______________________________________________
ruby-sig mailing list -- ruby-sig@lists.fedoraproject.org
To unsubscribe send an email to ruby-sig-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/ruby-sig@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure