[Distutils] PyPI and Uploading Documentation

Ben Finney ben+python at benfinney.id.au
Sun May 17 03:31:53 CEST 2015


Donald Stufft <donald at stufft.io> writes:

> Ok, so unless someone comes out against this in the near future here are my
> plans:
>
> 1. Implement the ability to delete documentation.

+1.

> 2. Implement the ability to add a (simple) redirect where we would
> essentially just send /<project>/(.*) to $REDIRECT_BASE/$1.
>
> 3. Implement the ability to point the documentation URL to something
> that isn't pythonhosted.org

Both of these turn PyPI into a vector for arbitrary content, including
(for example) illegal, misleading, or malicious content.

Automatic redirects actively expose the visitor to any malicious or
mistaken links set by the project owner.

If you want to allow the documentation to be at some arbitrary location
of the project owner's choice, then an explicit static link, which the
visitor must click on (similar to the project home page link) is best.

-- 
 \      “I find the whole business of religion profoundly interesting. |
  `\     But it does mystify me that otherwise intelligent people take |
_o__)                                    it seriously.” —Douglas Adams |
Ben Finney



More information about the Distutils-SIG mailing list