From mboxrd@z Thu Jan 1 00:00:00 1970 From: Sebastian Rose Subject: Re: turn off inclusion of JavaScript helper code? Date: Wed, 21 Apr 2010 00:22:43 +0200 Message-ID: <87633l228c.fsf@gmx.de> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1O4LrK-0002KM-Cq for emacs-orgmode@gnu.org; Tue, 20 Apr 2010 18:23:58 -0400 Received: from [140.186.70.92] (port=40515 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1O4LrH-0002HS-F3 for emacs-orgmode@gnu.org; Tue, 20 Apr 2010 18:23:57 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1O4LrC-0007lu-SK for emacs-orgmode@gnu.org; Tue, 20 Apr 2010 18:23:53 -0400 Received: from mail.gmx.net ([213.165.64.20]:51019) by eggs.gnu.org with smtp (Exim 4.69) (envelope-from ) id 1O4Lr8-0007kx-II for emacs-orgmode@gnu.org; Tue, 20 Apr 2010 18:23:50 -0400 In-Reply-To: (Stefan Vollmar's message of "Tue, 20 Apr 2010 22:31:29 +0200") List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org To: Stefan Vollmar Cc: mailing-list-org-mode Mode Stefan Vollmar writes: > Hello, > > in our org-mode generated HTML pages we find these snippets: > > > > We have just noticed that MS Internet Explorer complains that these > lines pose a security risk (Firefox and Safari have no problem with > them), deleting the JavaScript code solves the issue. I have found a > link that might explain the problem: > http://www.codingforums.com/archive/index.php/t-78039.html > > (the problem is limited to locally accessed HTML pages, not HTML > content that is accessed over a network; we now use org-mode to > generate a locally stored collection of online help files in HTML - so > this is an awkward issue for us) M-x customize-variable RET org-export-html-style-include-scripts You can turn the inclusion off in your `org-export-projects-alist': :style-include-scripts nil > > As our pages do not need this JavaScript code anyway, having a switch that prevents this code from being included would be a good solution from our point of view. Naturally, we could have a "postprocessing" script to remove the offending lines before releasing the HTML content, however, that seems such a crude approach. > > Here is a suggestion, maybe there could be a new switch for #+OPTIONS: > > javascript: turn on/off inclusion of JavaScript helper code for code highlighting > > and while we are at it: > > css: turn on/off inclusion of stylesheet? M-x customize-variable org-export-html-style-include-default RET And per project in `org-export-projects-alist': :style-include-default nil HTH Sebastian