i'm not convinced this is an issue. being able to run nonfree programs if the user explicitly points at them isn't in violation of anything. many browsers in our repos don't even come with LibreJS, and are just as capable of accepting proprietary javascript, flash, java; even plugins for DRM.

i think the real value in this discovery comes from the realization that we can no longer recommend using Youtube through youtube-dl, except perhaps for specific videos that we know won't lead youtube-dl to download and execute nonfree javascript.

that said, that's no reason to not accept avideo. avideo is to youtube-dl what Icecat+LibreJS is to... let's say konqueror or ephiphany.

isacdaavid wrote:

i think the real value in this discovery comes from the realization that we can no longer recommend using Youtube through youtube-dl, except perhaps for specific videos that we know won't lead youtube-dl to download and execute nonfree javascript.

it's actually less problematic than that. according to this mail, the Youtube script in question is so trivial that even LibreJS would let it pass.

isacdaavid wrote:

isacdaavid wrote:

i think the real value in this discovery comes from the realization that we can no longer recommend using Youtube through youtube-dl, except perhaps for specific videos that we know won't lead youtube-dl to download and execute nonfree javascript.

it's actually less problematic than that. according to this mail, the Youtube script in question is so trivial that even LibreJS would let it pass.

could be, youtube-dl also supports other websites, and not all of them might run nonfree JS.

many browsers in our repos don't even come with LibreJS, and are just as capable of accepting proprietary javascript, flash, java; even plugins for DRM.

Yes, youtube-dl could be considered like a web browser (downloader in this case) for videos. The bad thing of these is that, afaik, there aren't any plugins or extension to block JS in general for youtube-dl (different from Iceweasel, for ex., where we have LibreJS and NoScript) at the time of downloading videos.