- From: Antonio Olmo Titos <antonio@w3.org>
- Date: Tue, 28 Jul 2015 19:46:44 +0900
- To: Tobie <tobie@codespeaks.com>, spec-prod@w3.org, W3C Team <w3t@w3.org>, Chairs <chairs@w3.org>, Systeam <w3t-sys@w3.org>
On 28/07/15 Tobie wrote: > What's your plan for versioning if any? We encourage people to link to the "latest patch" shortcuts, eg //www.w3.org/scripts/angularjs/1.3/* instead of //www.w3.org/scripts/angularjs/1.3.16/* We will upload security patches, and update "latest patch" symlinks to point to those. About different "major" and "minor" numbers, we'll try to stay reasonably up to date. But we don't intend to follow development of all these projects very closely, except when they bring significant improvements, or if there are requests from users. Worst case scenario: one really needs version X of Y, but the team doesn't consider it useful or popular enough → he/she can upload their own files, as we used to do until today. We are not saying this will evolve into a strong constraint in the long term, ie banning all custom JS from the site. We are not saying it won't, either :) > That seems like an excessive upfront concern that won't actually solve > the problem (if there is one). What's to stop me from curling for lib > names until I hit a 200 OK? > You could also filter out requests using the HTTP_REFERER header if > hot-linking really becomes a problem. We realise that "hiding" the index does not solve the hypothetical problem of too many people linking to those files. We discussed several options, ranging from paranoid to naïve. This was a simple compromise to get started. Filtering headers was considered too, and we may still do that. Thanks for the reminder! Anyway, let me correct myself: it isn't as restrictive as I said before: On 28/07/15 Antonio wrote: > This index page, on the other hand, we decided to keep staff-only for now It's visible also to anyone with a W3C account (not only staff). On 28/07/15 Tobie wrote: > This seems to be staff only. Suggest either opening it up or avoiding to > mail public mailings lists about this. I'm sorry about that. I sent this to several lists, and didn't realise part of this wouldn't be publicly readable... -- Antonio Olmo Titos web developer, W3C antonio@w3.org http://w3.org/People/Antonio +81 335162504
Received on Tuesday, 28 July 2015 10:46:51 UTC