Commit 5459c534 authored by Sigurdur Asgeirsson's avatar Sigurdur Asgeirsson Committed by Commit Bot

Remove stale, unused and un-owned copy of D3.js.

Change-Id: Ib2e213b3ca883c0671b12bf8be864719a240feab
Reviewed-on: https://chromium-review.googlesource.com/c/1259245Reviewed-by: default avatarJochen Eisinger <jochen@chromium.org>
Commit-Queue: Sigurður Ásgeirsson <siggi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#597096}
parent 04f5e7e3
andrewhayden@chromium.org
Name: d3
Short Name: d3
URL: https://github.com/mbostock/d3
Version: 3.4.4
Date: Mon Mar 24 20:45:44 2014 -0700
Revision: fa55eead411a3c1b01703cb1ddfd59ccc0b23124
License: BSD 3-Clause
License File: src/LICENSE
Security Critical: No
License Android Compatible: Yes
Description:
A JavaScript library for manipulating documents based on data.
Subject to the security patch(es) described below, you MAY include d3 in web-facing content, such
as in pages generated by bots or tools.
Local Modifications:
1. Deleted everything except for:
* d3.js the standalone non-minified library
* LICENSE the BSD-style 3-Clause license
* README.md the readme file from github, for basic information
2. Applied the following patches at the request of security:
patches/001_no_html.patch Disables the html() convenience functions, which could be used to
inject arbitrary content into the page. Instead of using html(),
programmatically create the individual nodes and/or text that you
require.
The html() methods have been modified to throw exceptions that
make it obvious that this feature is disabled for security.
diff --git a/third_party/d3/src/d3.js b/third_party/d3/src/d3.js
index a3e4b95..8a98c4d 100644
--- a/third_party/d3/src/d3.js
+++ b/third_party/d3/src/d3.js
@@ -713,6 +713,7 @@
}) : this.node().textContent;
};
d3_selectionPrototype.html = function(value) {
+ throw "disallowed by chromium security";
return arguments.length ? this.each(typeof value === "function" ? function() {
var v = value.apply(this, arguments);
this.innerHTML = v == null ? "" : v;
@@ -9274,9 +9275,11 @@
return JSON.parse(request.responseText);
}
d3.html = function(url, callback) {
+ throw "disallowed by chromium security";
return d3_xhr(url, "text/html", d3_html, callback);
};
function d3_html(request) {
+ throw "disallowed by chromium security";
var range = d3_document.createRange();
range.selectNode(d3_document.body);
return range.createContextualFragment(request.responseText);
Copyright (c) 2010-2014, Michael Bostock
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
* Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
* The name Michael Bostock may not be used to endorse or promote products
derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL MICHAEL BOSTOCK BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# Data-Driven Documents
<a href="http://d3js.org"><img src="http://d3js.org/logo.svg" align="left" hspace="10" vspace="6"></a>
**D3.js** is a JavaScript library for manipulating documents based on data. **D3** helps you bring data to life using HTML, SVG and CSS. D3’s emphasis on web standards gives you the full capabilities of modern browsers without tying yourself to a proprietary framework, combining powerful visualization components and a data-driven approach to DOM manipulation.
Want to learn more? [See the wiki.](https://github.com/mbostock/d3/wiki)
For examples, [see the gallery](https://github.com/mbostock/d3/wiki/Gallery) and [mbostock’s bl.ocks](http://bl.ocks.org/mbostock).
This diff is collapsed.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment