[Distutils] PyPI and Uploading Documentation
Ben Finney
ben+python at benfinney.id.au
Sun May 17 03:31:53 CEST 2015
Donald Stufft <donald at stufft.io> writes:
> Ok, so unless someone comes out against this in the near future here are my
> plans:
>
> 1. Implement the ability to delete documentation.
+1.
> 2. Implement the ability to add a (simple) redirect where we would
> essentially just send /<project>/(.*) to $REDIRECT_BASE/$1.
>
> 3. Implement the ability to point the documentation URL to something
> that isn't pythonhosted.org
Both of these turn PyPI into a vector for arbitrary content, including
(for example) illegal, misleading, or malicious content.
Automatic redirects actively expose the visitor to any malicious or
mistaken links set by the project owner.
If you want to allow the documentation to be at some arbitrary location
of the project owner's choice, then an explicit static link, which the
visitor must click on (similar to the project home page link) is best.
--
\ “I find the whole business of religion profoundly interesting. |
`\ But it does mystify me that otherwise intelligent people take |
_o__) it seriously.” —Douglas Adams |
Ben Finney
More information about the Distutils-SIG
mailing list