Index: runtime/third_party/d3/README.chromium |
diff --git a/runtime/third_party/d3/README.chromium b/runtime/third_party/d3/README.chromium |
new file mode 100644 |
index 0000000000000000000000000000000000000000..7697762208d1769907d8616610022846973ff21d |
--- /dev/null |
+++ b/runtime/third_party/d3/README.chromium |
@@ -0,0 +1,31 @@ |
+Name: d3 |
+Short Name: d3 |
+URL: https://github.com/mbostock/d3 |
+Version: 3.4.4 |
+Date: Mon Mar 24 20:45:44 2014 -0700 |
+Revision: fa55eead411a3c1b01703cb1ddfd59ccc0b23124 |
+License: BSD 3-Clause |
+License File: src/LICENSE |
+Security Critical: No |
+License Android Compatible: Yes |
+ |
+Description: |
+A JavaScript library for manipulating documents based on data. |
+ |
+Subject to the security patch(es) described below, you MAY include d3 in web-facing content, such |
+as in pages generated by bots or tools. |
+ |
+ |
+Local Modifications: |
+1. Deleted everything except for: |
+* d3.js the standalone non-minified library |
+* LICENSE the BSD-style 3-Clause license |
+* README.md the readme file from github, for basic information |
+ |
+2. Applied the following patches at the request of security: |
+patches/001_no_html.patch Disables the html() convenience functions, which could be used to |
+ inject arbitrary content into the page. Instead of using html(), |
+ programmatically create the individual nodes and/or text that you |
+ require. |
+ The html() methods have been modified to throw exceptions that |
+ make it obvious that this feature is disabled for security. |