Web interface relies on remote third-party web resources
In 3.0, and also master as of now, the web interface makes use of the following remote resources:
-
jquery.js
andjquery-ui.js
from ajax.googleapis.com -
flowplayer.js
andflowplayer.swf
from releases.flowplayer.org - the QR code generation API at chart.apis.google.com (see #25005)
This is bad for several reasons:
- It breaks if these resources can't be accessed, in situations such as a LAN with no internet connectivity, corporate networks with administrative restrictions, or countries where the remote hosts might be blocked; or again, just transient network errors. In the case of the QR code and probably also flowplayer, this results only in missing the corresponding features; however the lack of jQuery breaks basic functionality.
- It circumvents the principles of the GPL.
- It leaks over the internet and to third parties the existence and possibly the URL of the web interface, which can be a privacy and security issue for the user.
These remote resources should be replaced with local ones shipped with VLC. Another option is also to simply remove the corresponding features.
Edited by Pierre Ynard