[aninteger]

GL is not browsable with JavaScript disabled while GH is.

[uHuge]

Wonder how Gitea[0] stands on this line? It seems the easiest to setup for small teams.

0: https://gitea.io/en-us

[pnako]

I use Gitea for my own projects, i.e. I do the setup myself and it's trivial. It uses SQLite as backend, so no complex DB deployment.

It's very easy to deploy, consumes few resources (you can run it on a low-end VPS). It even has Jenkins integration.

However I don't know how it scales to big teams and projects since I only use it for myself. And I'm not entirely convinced by its security track record, but it looks like things are improving.

[manigandham]

Why is this a hard sell? How many people does this really affect? And why disable JS on GL?

[lillecarl]

A Turing complete language executing unsigned code in a sandbox that allows HTTP and HTTPS requests to 0.0.0.0/0 and ::/0 is not something everyone wants in their life.

[pengaru]

I run noscript without any whitelist at all, and considering how popular noscript is I doubt I'm alone here.

It makes the modern web so much more pleasant, paradoxically by breaking it, now that user-hostile machinations are the norm.

And yes, gitlab's web interface is substantially more annoying than github, in my experience.

[aninteger]

It's not a hard sell, but it is certainly an inconvenience. I prefer to browse with javascript off by default and only enable it for sites that absolutely need it. I've had issues where sites using JS have caused a single core on my laptop to spin at 100% thus affecting battery life negatively.

[neunnech]

In some cases "I'm browsing GitLab" might be the exact impetus for someone's attempt to disable JS. As noted above, GitLab is sluggish. I was an early adopter/advocate for GitLab, but you can feel the bloat on every page and I no longer use it.