Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent leaking trackable pageview stats to CDNs by default #2391

Open
exaexa opened this issue Jan 6, 2024 · 2 comments · May be fixed by #2401
Open

Prevent leaking trackable pageview stats to CDNs by default #2391

exaexa opened this issue Jan 6, 2024 · 2 comments · May be fixed by #2401
Labels
Format: HTML Related to the default HTML output help wanted

Comments

@exaexa
Copy link

exaexa commented Jan 6, 2024

This is a kinda continuation of my previous comment here: #2159 (comment) from #2159 .

It would be great if the generated HTML didn't send referrer URLs in headers, thus preventing the CDNs the default access to (very easily trackable) user page load stats by default. In turn, this would allow much better compliance with various privacy protection guidelines, incl. GDPR.

For the beginning, I think that just pasting a referrerpolicy="no-referrer" into all <link> tags that point to external CDNs would be more than sufficient. See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/link#referrerpolicy for details there.

Thanks!
@mortenpi mortenpi added help wanted Format: HTML Related to the default HTML output labels Jan 15, 2024
@mortenpi
Copy link
Member

This seems like a good thing to do, and should be a pretty easy change, if anyone wants to PR it.

@exaexa
Copy link
Author

exaexa commented Jan 15, 2024 •
edited
Loading

if anyone wants to PR it.

(I'd PR but I didn't have much time lately, so decided to go issue first in case anyone manages to get to this first)

EDIT: ok well in the end it didn't take that long lol.

@exaexa exaexa linked a pull request Jan 15, 2024 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Format: HTML Related to the default HTML output help wanted
Projects
None yet
Milestone
No milestone
2 participants
@mortenpi @exaexa