Privacy issue on ASF 25th anniversary page

[bproffitt]

@sebbASF has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script:

https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59

Thanks!

[garydgregory]

Or more simply a URL to YT?

Gary

On Tue, Apr 23, 2024, 2:02 PM Brian Proffitt @.***> wrote:

@sebbASF https://github.com/sebbASF has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script:

https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59

Thanks!

— Reply to this email directly, view it on GitHub https://github.com/apache/www-site/issues/373, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJB6N5OGX4XPP4ZBBYKD3TY62O2FAVCNFSM6AAAAABGVNHWM2VHI2DSMVQWIX3LMV43ASLTON2WKOZSGI2TSNBVHA4TENI . You are receiving this because you are subscribed to this thread.Message ID: @.***>

[raboof]

@sebbASF has brought a privacy concern to us on https://apache.org/asf25years/index.html. The page is apparently loading a bunch of back-end stuff from YouTube into the viewer's browser, not just the video. After consultation with Christian Grobmeier, one solution would be load the video with this (example) script:

https://github.com/apache/privacy-website/blob/main/examples/youtube-html/with-youtube-embeds.html#L45-L59

We made a pelican plugin earlier to make this (relatively) easy, so we can use that here like https://github.com/apache/www-site/pull/374 .

Of course this could be better(-documented), improvements welcome ;)

[sebbASF]

Where is the plugin documented currently?

[raboof]

Where is the plugin documented currently?

Currently, in the PR at https://github.com/apache/infrastructure-pelican/pull/52 and in the plugin itself at https://github.com/apache/infrastructure-pelican/blob/master/plugins/consensual_youtube.py#L20 . Just added a link to it from https://privacy.apache.org/examples/youtube-html/with-youtube-api.html (you might need to refresh to see it) which is linked from https://privacy.apache.org/policies/website-policy.html

[sebbASF]

I think it would be better to link to the code rather than the PR, as the latter is very long - it's not obvious how much is usage instructions and how much is irrelevant.

Also the code usage instructions can be better maintained.

[raboof]

Agreed, https://github.com/apache/privacy-website/pull/45