Hacker News new | past | comments | ask | show | jobs | submit login

While I appreciate their intention and their transparency on what they're doing, I'll echo other comments here in that I, too, feel a bit uneasy that a 3rd party is rewriting my content.

The good news is that a (strict) CSP can help with that - and they do mention it in their blog post that they don't rewrite anything if there's a CSP header.

It's also worth noting that a (strict) CSP also prevents them from injecting their analytics JS from being injected to your site.






Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: