Web interface relies on remote third-party web resources
In 3.0, and also master as of now, the web interface makes use of the following remote resources:
-
jquery.js
andjquery-ui.js
from ajax.googleapis.com -
flowplayer.js
andflowplayer.swf
from releases.flowplayer.org - the QR code generation API at chart.apis.google.com (see #25005)
This is bad for several reasons:
- It breaks if these resources can't be accessed, in situations such as a LAN with no internet connectivity, corporate networks with administrative restrictions, or countries where the remote hosts might be blocked; or again, just transient network errors. In the case of the QR code and probably also flowplayer, this results only in missing the corresponding features; however the lack of jQuery breaks basic functionality.
- It circumvents the principles of the GPL.
- It leaks over the internet and to third parties the existence and possibly the URL of the web interface, which can be a privacy and security issue for the user.
These remote resources should be replaced with local ones shipped with VLC. Another option is also to simply remove the corresponding features.