[Doc] Remove Google Analytics from the HugeGraph Website

[niallkp]

Problem Type (问题类型)

Hi HugeGraph Team

The ASF Privacy Policy[1][2] does not permit the use of Google Analytics on any ASF websites and the ASF Infra team will soon enforce a Content Security Policy(CSP) that will block access to external trackers:

• https://lists.apache.org/thread/w34sd92v4rz3j28hyddmt5tbprbdq6lc

Please could you remove the use of the Google Analytics from the HugeGraph website (I will submit a PR request shortly to do that)?

The ASF hosts its own Matomo instance to provide projects with analytics and you can request a tracking id for your project by sending a mail to privacy AT apache.org.

• https://privacy.apache.org/faq/committers.html#can-i-use-web-analytics-matomo

Additionally I would recommend reviewing any external resources loaded by your website. The Content Security Policy will prevent any resources being loaded from 3rd Party providers that the ASF does not have a Data Processing Agreement (DPA) with. On the 1st February Infra will begin a temporary "brownout" when the CSP will be turned on for a short period. This will allow projects to check which parts, if any, of their websites will stop working. The Privacy FAQ answers a number of questions about which external providers are permitted or not:

• https://privacy.apache.org/faq/committers.html

Thanks

Niall

[1] https://privacy.apache.org/policies/website-policy.html
[2] https://privacy.apache.org/faq/committers.html#can-i-use-google-analytics

[niallkp]

Hi @imbajin, thanks for applying the PR. I can see that the asf-site branch has been updated - but it hasn't been reflected in the published website, which still shows GA.

Maybe something didn't quite work in the automated publishing process. The Infra team said "A simple whitespace commit would trigger a sync"

[niallkp]

Could someone take a look at this please, I still see Google Analytics on the deployed website?

[imbajin]

Could someone take a look at this please, I still see Google Analytics on the deployed website?

@niallkp Apologize for the delay, already merged a new PR & seems working fine now? (Thanks again)

[niallkp]

Thank you @imbajin - much appreciated!

[imbajin]

Thank you @imbajin - much appreciated!

@niallkp however I found a critical CSP error

I don't know if ASF has updated the rules of CSP or what the situation is. Previously, JS/CSS files could still be loaded normally....

(Refer to LLM)I try to add a meta tag for it but not work :)

Wonder if you are aware of relevant changes in ASF website rules?

[niallkp]

My understanding is that Infra have just turned on the CSP for the weekend for further testing (see the email I referenced in the description of this issue). So what you're seeing are the rules that will be made permanent on 1st March 2025.

The ASF Privacy Policy does not permit loading of resources from from 3rd Party providers that the ASF does not have a Data Processing Agreement (DPA) with and the CSP infra will introduce prevents that. In order to comply with the policy and not have resources blocked by the new CSP, you will need to host things like Google Fonts, JQuery and Bootstrap locally within your website.

Google Webfonts Helper is useful for downloading what you need to host locally for fonts:

• https://gwfh.mranftl.com/fonts/open-sans
• https://gwfh.mranftl.com/fonts/rubik
• https://gwfh.mranftl.com/fonts/tajawal

Also, trying to override Infra's CSP on your site is not a good idea

[imbajin]

My understanding is that Infra have just turned on the CSP for the weekend for further testing (see the email I referenced in the description of this issue). So what you're seeing are the rules that will be made permanent on 1st March 2025.

The ASF Privacy Policy does not permit loading of resources from from 3rd Party providers that the ASF does not have a Data Processing Agreement (DPA) with and the CSP infra will introduce prevents that. In order to comply with the policy and not have resources blocked by the new CSP, you will need to host things like Google Fonts, JQuery and Bootstrap locally within your website.

Google Webfonts Helper is useful for downloading what you need to host locally for fonts:Google Webfonts Helper

• gwfh.mranftl.com/fonts/open-sans
• gwfh.mranftl.com/fonts/rubik
• gwfh.mranftl.com/fonts/tajawal

Also, trying to override Infra's CSP on your site is not a good idea

Thanks a lot for the context, we'll try to localize these static files soon:)

Update: done for it (some replacement completed )

[niallkp]

There are 28 files/pages still with GA - looks like they're old & no longer maintained/generated. I've created a PR #399 to remove the GA from those files