Page MenuHomePureOS Tracker

firefox-esr: tolerates execution of nonfree Javascript
Open, Freedom IssuePublic

Description

PureOS should include Mozilla addon LibreJS and install it by default, to block execution of nonfree Javascript.

Debian tracks creation of package xul-ext-librejs at bug#659348.
When that is done, that package should be included in the default set in calamares and debian-installer.

Event Timeline

This issue was originally reported as T108 but separated: We better solver this independently from PureBrowser, to provide the freedom of opt-out to _not_ installing the plugin.

jonas.smedegaard added a subscriber: mak.

@mak I believe you are the one orchestrating what constitutes "default install of PureOS".

mak reassigned this task from mak to jonas.smedegaard.Mar 30 2018, 12:47

We better solver this independently from PureBrowser, to provide the freedom of opt-out to _not_ installing the plugin.

If you want to give people the opportunity to uninstall plugins, declare a recommends relationship of purebrowser to those, instead of making it a dependency.
That will pull them in by default, while giving users the opportunity to remove them if they want to do so.
There is nothing I can do in the default seeds that wouldn't result in major chaos, with people getting plugins installed without the browser, autoremoval confusion, etc.

jonas.smedegaard removed jonas.smedegaard as the assignee of this task.Aug 20 2018, 00:26
jonas.smedegaard removed a subscriber: jonas.smedegaard.
sean.obrien raised the priority of this task from Normal to Freedom Issue.Oct 31 2018, 09:12
sean.obrien added a subscriber: sean.obrien.

What's the status on this? The issue of LibreJS is coming up again in general, and I will also be requesting some other addons are either default or opt-in (perhaps with a slide in the first-boot setup wizard for PureOS).

Thanks all! I know packaging ain't easy.

jonas.smedegaard renamed this task from PureOS tolerates execution of nonfree Javascript in Mozilla applications to firefox-esr: tolerates execution of nonfree Javascript.May 28 2021, 00:29