Simplemde-markdown-editor: please don't download files silently

[ChangePlaces]

please don't download files from cdn.jsdelivr silently. include the necessary files with your distribution, or tell the user to include them.

sites go down / missing.

[drewm]

There are configuration options to turn off the downloading of dependancies, so it's not hard to change this behaviour. You wouldn't deploy to production without checking configuration options anyway.

[ChangePlaces]

There's a configuration option to not download awesome fonts, yes. But nothing to stop the downloading of the dic files from the site jsdelivr.

[RandomRandomRandom]

You need to disable spellchecker if you want the .dic files to not be downloaded

[ChangePlaces]

which is not obvious that files will be downloaded unless you disable spellchecker. anyway, there's the spellcheck attribute

[drewm]

You probably want to download the spell checker - the downloads are massive and it only does English anyway.

[ChangePlaces]

you probably don't want to download the spell checker

Fixed and yes, I agree. Still this should be added to the docs and perhaps disabled by default. The spellcheck attribute in html5 really should be used instead.

[darkuranium]

I'm with @ChangePlaces on this one. Please document all the hidden downloads (and how to disable them). TBH, I think having them disabled by default is for the best, actually.

Also, even if the downloads are massive, people might still prefer to avoid them (in my specific use-case, the file would be accessed via localhost anyways, which is fast --- and yet another reason to avoid third-party downloads!).

For my use case, all the hidden downloads make this a complete show-stopper issue. I need zero.

[ChangePlaces]

Hidden downloading is rude and leaves open the question - what else are you silently injecting? It is the reason I moved away a long time ago.

[jhpratt]

@ChangePlaces It's open source. If you think they're injecting something malicious, go ahead and look through the code.

[ChangePlaces]

Or... I could spend that time sitting in the sun and relaxing because I used a different solution a long time ago.

[hypersoft]

Should not be downloading these dictionary files through XHR. The browser won't cache them because the requests are direct. Actually, you should remove this spell checking feature altogether.

If the browser does not support enabling spellchecking on the html element inner text, then you should recommend the usage of another browser that does.