Use Bootstrap everywhere on the website
Recently, we've used [Bootstrap](https://getbootstrap.com/) on pages where we needed more flexibility on how to structure the content on the page, like:
Bootstrap made this extremelly easy and is still the most popular HTML+CSS framework/library.
There has been some work upstream on making ikiwiki work better with Bootstrap:
Tor is using Bootstrap for their dynamic style guide:
#4 Updated by sajolida over 1 year ago
What's blocking this is having people available to do the work (and ideally money to pay them).
I'm not sure how this relates to developing an updated style guide for Tails, which could include a custom Bootstrap theme like Tor did: http://oniongit.eu/infra/styleguide.git:
- Switching to Bootstrap after developing the style guide would avoid having us to hack our current CSS to work with Bootstrap. I'm especially worried about the general navigation parts.
- Switching to Bootstrap before developing the style guide might make it easier to develop the style guide as we'd be able to test it on real content directly.
#6 Updated by intrigeri over 1 year ago
It recently came to my attention that CSS frameworks can have security issues such as XSS (see e.g. https://security-tracker.debian.org/tracker/source-package/twitter-bootstrap) — I had no clue! On #9216 we've discussed a bit how our copy of Bootstrap would be maintained/upgraded. Back then we had in mind bugfixes but not security issues and regardless, we did not reach any actionable conclusion. Indeed, the last update was in May 2016 (to 3.3.6). Since then only another 3.x was released upstream and the security fixes were applied only in 4.x. So I'm humbly asking that this time, while discussing using Bootstrap more broadly, we do take into account the future maintenance of our copy. Fair enough? :)
- Status changed from Confirmed to Rejected
- Assignee deleted (
The new Home and About pages are written with pure CSS Flexbox and without Bootstrap.
It's a bit more time consuming to code but also more flexible.
So there's no good reason to want Bootstrap everywhere. Removing it from the pages who currently use it, is not a big priority either I would say. Bootstrap might is still useful to provide more advanced and ready-to-use widgets sometimes (until we have our own maybe one day).