Privacy issue on ASF 25th anniversary page

[bproffitt]

@sebbASF has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script:

https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59

Thanks!

[garydgregory]

Or more simply a URL to YT? Gary

…

On Tue, Apr 23, 2024, 2:02 PM Brian Proffitt ***@***.***> wrote: @sebbASF <https://github.com/sebbASF> has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script: https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59 Thanks! — Reply to this email directly, view it on GitHub <#373>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAJB6N5OGX4XPP4ZBBYKD3TY62O2FAVCNFSM6AAAAABGVNHWM2VHI2DSMVQWIX3LMV43ASLTON2WKOZSGI2TSNBVHA4TENI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[raboof]

@sebbASF has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script:

https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59

We made a pelican plugin earlier to make this (relatively) easy, so we can use that here like #374 .

Of course this could be better(-documented), improvements welcome ;)

[sebbASF]

Where is the plugin documented currently?

[raboof]

Where is the plugin documented currently?

Currently, in the PR at apache/infrastructure-pelican#52 and in the plugin itself at https://github.com/apache/infrastructure-pelican/blob/master/plugins/consensual_youtube.py#L20 . Just added a link to it from https://privacy.apache.org/examples/youtube-html/with-youtube-api.html (you might need to refresh to see it) which is linked from https://privacy.apache.org/policies/website-policy.html

[sebbASF]

I think it would be better to link to the code rather than the PR, as the latter is very long - it's not obvious how much is usage instructions and how much is irrelevant.

Also the code usage instructions can be better maintained.

[raboof]

Agreed, apache/privacy-website#45