Re: [PR] Include jquery instead of getting it from ajax.go ogleapis.com [roller-website]

raboof commented on code in PR #9:
URL: https://github.com/apache/roller-website/pull/9#discussion_r2112805561


##########
content/jquery-1.11.1.min.js:
##########
@@ -0,0 +1,4 @@
+/*! jQuery v1.11.1 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.org/license */

Review Comment:
   One step might be to download it from https://code.jquery.com/jquery-1.11.1.min.js yourself and diff it.
   
   Of course that still doesn't tell us if perhaps the artifact at code.jquery.com was tampered with. Ideally we'd get the jquery sources from their version control and do the minification 'ourselves' - but that might be rather overkill ;)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]