Joplin's access to sites

Updated Joplin lately, and checked settings. In the past Joplin accessed only my cloud drive and github (when opening settings or checking for updates). To my surprise, the new version of Joplin (stable 2.4.12) tries to open new sites - no changes in my settings ! There may be good reasons, yet any user unable or unwilling to review public code will necessarily wonder : are these requests to the sites listed below really needed, since Joplin worked before ?
cwl.cc

jsdelivery.net
fastgit.org
Which information downloaded or uploaded ?

There were a bunch of github mirrors added to allow Chinese users to access the plugins.

Thank you, this may be a partial reply.
But does jsdelivery sound to you like a mirror ?

Here is the list of mirrors (full url) used by Joplin.

mirrorUrls = [
		'https://cdn.staticaly.com/gh/joplin/plugins/master',
		'https://ghproxy.com/https://raw.githubusercontent.com/joplin/plugins/master',
		'https://cdn.jsdelivr.net/gh/joplin/plugins@master',
		'https://raw.fastgit.org/joplin/plugins/master',
	];

jsdelivery is indeed an odd one, since it appears to be up for sale, perhaps that one isn't so trustworthy.

It shows up as up for sale for you? For me it seems to work fine: https://cdn.jsdelivr.net/gh/joplin/plugins@master/README.md

But maybe we could move it down the list if it's less reliable than the others.

The real URL works cdn.jsdelivr.net, the URL posted in the OP is incorrect - jsdelivery.net and does come up as for sale - (note that cdn is required and jsdelivr has been misspelt).

2 Likes

I was under the impression that the original list came from scanning outgoing/incoming connections (and thought maybe something funky was going on with jsdelivr). But indeed, a typo does make the most sense.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.