Use Bootstrap everywhere on the website
Recently, we've used [Bootstrap](https://getbootstrap.com/) on pages where we needed more flexibility on how to structure the content on the page, like:
Bootstrap made this extremelly easy and is still the most popular HTML+CSS framework/library.
There has been some work upstream on making ikiwiki work better with Bootstrap:
Tor is using Bootstrap for their dynamic style guide:
#4 Updated by sajolida about 1 year ago
What's blocking this is having people available to do the work (and ideally money to pay them).
I'm not sure how this relates to developing an updated style guide for Tails, which could include a custom Bootstrap theme like Tor did: http://oniongit.eu/infra/styleguide.git:
- Switching to Bootstrap after developing the style guide would avoid having us to hack our current CSS to work with Bootstrap. I'm especially worried about the general navigation parts.
- Switching to Bootstrap before developing the style guide might make it easier to develop the style guide as we'd be able to test it on real content directly.
It recently came to my attention that CSS frameworks can have security issues such as XSS (see e.g. https://security-tracker.debian.org/tracker/source-package/twitter-bootstrap) — I had no clue! On #9216 we've discussed a bit how our copy of Bootstrap would be maintained/upgraded. Back then we had in mind bugfixes but not security issues and regardless, we did not reach any actionable conclusion. Indeed, the last update was in May 2016 (to 3.3.6). Since then only another 3.x was released upstream and the security fixes were applied only in 4.x. So I'm humbly asking that this time, while discussing using Bootstrap more broadly, we do take into account the future maintenance of our copy. Fair enough? :)