Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/website:'s present server still relies on defunct RawGit service #46469

jub0bs opened this issue May 31, 2021 · 6 comments
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. website


Copy link

jub0bs commented May 31, 2021

One can (and the likes of Dave Cheney do) point to one's present slideshow hosted on GitHub. The slideshow then runs on the server, which obviates the need for installing and running the present command on one's local machine. For instance, see

However, I noticed that SVG assets hosted see their URL's host rewritten to permanently redirects to, which states that the RawGit project is reaching the end of its life:

RawGit is now in a sunset phase and will soon shut down. It's been a fun five years, but all things must end. [...] If you're currently using RawGit, please stop using it as soon as you can.

(my emphasis)

As a result of this URL rewrite and the RawGit project's status, such SVG assets fail to load (with a 403 response status) in present slides run on; for instance, see

failure to load SVG in slideshow

Note: a WHOIS lookup confirms that is owned by Google; is maintained by @dmitshur.

I tracked down the offending URL rewrite to the golang/gddo project, but that project is marked as archived and no longer accepts issues or pull requests. I privately reached out to @julieqiu for guidance on Gophers Slack, who suggested I open an issue about this here.

Relying on RawGit despite its sunset status may have security implications: when RawGit becomes truly defunct, its domain names may be acquired by a malevolent actor who could serve arbitrary SVGs in place of the slideshow's authors'. I've privately reached out to Ryan Grove (RawGit's author) on Twitter, who indicated he has no plans to let domain names and lapse any time soon, but his plans may change, especially if the cost of ownership becomes prohibitive.

Moreover, the ability to run a slideshow on is valuable to the community, and isn't yet (AFAIK) supported on Fixing this issue (by no longer relying on RawGit) would be a good thing.

@gopherbot gopherbot added this to the Unreleased milestone May 31, 2021
@seankhliao seankhliao added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label May 31, 2021
Copy link

maybe the rewrite could just be removed since github now serves svgs with content-type: image/svg+xml

Copy link

jub0bs commented Jun 21, 2021

Is there anything I can do to help? Could I submit a patch somewhere (if not on the golang/gddo repo, since it's archived)?

Copy link

jub0bs commented Nov 8, 2022

No progress in a year and a half on this. I'd like to renew my offer to help, if I can.

Copy link

jub0bs commented Dec 9, 2022

The problem persists to this day, and expires at the end of January 2023.

Edit (2023/03/07): was renewed until January 2024.

Copy link

ncruces commented Feb 28, 2023

I tried fixing a documentation link in #36692 and, in the end, no one merged it. 🤷

Copy link

lhogan3 commented Mar 6, 2023

Is there any update on this? I just started receiving 403s for all content I have been trying to access because of this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. website
None yet

No branches or pull requests

6 participants