starred/ArchiveBox

Fork 0

mirror of https://github.com/ArchiveBox/ArchiveBox.git synced 2026-04-25 09:06:02 +03:00

[GH-ISSUE #1011] Question: Can I disable all JS without breaking the UI? #2144

New issue

Closed

opened 2026-03-01 17:56:51 +03:00 by kerem · 3 comments

kerem commented

2026-03-01 17:56:51 +03:00

Owner

Originally created by @kotovalexarian on GitHub (Aug 9, 2022).
Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1011

Hello. I don't want any untrusted JS to run on my subdomain. I know that JS stripping (#237) is not yet implemented. I know that you recommend (#239) to disable some extractors, but I don't want to do this because I want to save as much information about webpages as possiblle (except JS). So I'm going to do the following:

Drop (HTTP 404) any file with application/javascript MIME type using Nginx
Use Content Security Policy with script-src 'none'

This will disable all JS, even that is included with ArchiveBox if such exists. My question: is any JS included with ArchiveBox and is it essential?

Originally created by @kotovalexarian on GitHub (Aug 9, 2022). Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1011 Hello. I don't want any untrusted JS to run on my subdomain. I know that JS stripping (#237) is not yet implemented. I know that you recommend (#239) to disable some extractors, but I don't want to do this because I want to save as much information about webpages as possiblle (except JS). So I'm going to do the following: * Drop (HTTP 404) any file with `application/javascript` MIME type using Nginx * Use Content Security Policy with `script-src 'none'` This will disable all JS, even that is included with ArchiveBox if such exists. My question: **is any JS included with ArchiveBox and is it essential?**

kerem closed this issue

2026-03-01 17:56:51 +03:00

kerem commented

2026-03-01 17:56:51 +03:00

Author

Owner

@kotovalexarian commented on GitHub (Aug 10, 2022):

I've found that ArchiveBox is somewhat broken if JS is disabled. At least the appearance. It requires at least JS files and 'unsafe-inline' CSP permission.

@kotovalexarian commented on GitHub (Aug 10, 2022): I've found that ArchiveBox is somewhat broken if JS is disabled. At least the appearance. It requires at least JS files and `'unsafe-inline'` CSP permission.

kerem commented

2026-03-01 17:56:51 +03:00

Author

Owner

@pirate commented on GitHub (Aug 20, 2022):

Yeah we don't support no-js mode for the UI. I'm sorry I don't have time/capacity to implement that for the admin UI areas.

You can go the static HTML publishing route though, which is JS-free: https://github.com/ArchiveBox/ArchiveBox/wiki/Publishing-Your-Archive#2-export-and-host-it-as-static-html

@pirate commented on GitHub (Aug 20, 2022): Yeah we don't support no-js mode for the UI. I'm sorry I don't have time/capacity to implement that for the admin UI areas. You can go the static HTML publishing route though, which is JS-free: https://github.com/ArchiveBox/ArchiveBox/wiki/Publishing-Your-Archive#2-export-and-host-it-as-static-html

kerem commented

2026-03-01 17:56:52 +03:00

Author

Owner

@satonotdead commented on GitHub (Jun 25, 2024):

That should be appreciated by a vast number of privacy advocates and data hoarders alike (!)

@satonotdead commented on GitHub (Jun 25, 2024): That should be appreciated by a vast number of privacy advocates and data hoarders alike (!)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/ArchiveBox#2144

No description provided.

Rows
Columns