[Sysadmin] css-d HTML and our public archive

Mon Apr 21 15:17:25 CDT 2014

On 21 Apr 2014, at 16:09, John Handelaar wrote:

> On 21 April 2014 15:42, Eric A. Meyer <eric at meyerweb.com> wrote:
>> I recently found out that our public archive URL no longer forwards 
>> from its
>> old address:
>>
>> http://archivist.incutio.com/css-discuss/
>>
>> …to its new address:
>>
>> http://archivist.incutio.com/viewlist/css-discuss
>
> This one isn't us, sadly, because it was totally the thing I could
> have fixed in 30 seconds if we hosted it.

I know.  It's not mine either, sadly.

>> I tried to update the HTML at
>> http://lists.css-discuss.org/mailman/edithtml/css-d/listinfo.html by
>> changing one URL for another, but I got this error instead:
>>
>> "
>> The page you saved contains suspicious HTML that could potentially 
>> expose
>
> Is it something like this?
>
> https://mail.python.org/pipermail/mailman-users/2009-August/066940.html
>
> Perhaps the HTML you're uploading (I can't see it, obv) contains links
> to offsite resources?  Not knowing exactly how to fix that we could
> certainly attempt to replicate the "offending" <head> elements on a
> local domain [1] to see if that got rid of the problem...

It does contains links to offsite resources (the above, specifically) 
but only as part of <a href=""> markup.  I'm not referring to offsite 
stylesheets or scripts, so far as I'm aware.  You can see the results of 
the customized HTML by going to 
http://www.css-discuss.org/mailman/listinfo/css-d, if that helps.

You guys can't see the markup in the list's database?  Interesting.  I'd 
have thought you were able to do that (speaking as someone who knows 
next to nothing about the internals of Mailman, your servers, and the 
security policies, obviously).

--
Eric A. Meyer - http://meyerweb.com/