You're viewing the front-end.social public feed.

Federated feed Local feed

Max Böckmxbck
Jul 8, 2024, 7:49 PM
polyfill.io was crazy huh, we just let a third party run any JS without even checking integrity. lol
anyway please add this snippet for google tag manager, marketing needs it
💬 9🔄 241⭐ 339

Replies

Fredericfrederic@chaos.social
Jul 8, 2024, 8:18 PM
@mxbck It's super hard to implement a good Content-Security-Policy when people use GTM.
💬 2🔄 0⭐ 1
Max Böckmxbck
Jul 8, 2024, 8:24 PM
@frederic been down that road too. Frustrating to say the least 😅
💬 0🔄 0⭐ 2
Patrick Hellerhellpat@mastodon.social
Jul 9, 2024, 8:35 PM
@frederic @mxbck
I wanted to build a service for that in 2018, but never did. But others did now.
https://csper.io/
https://developers.cloudflare.com/page-shield/policies/
I thought of a painful progress like:
- Hey, you added stuff via GTM and it will not work
- We blocked all that. Which are your requests and why do you need it -> documentation done
- Do the developers & management approve the adding of the new item?
If you force me to use jira, I will force you to request tracking stuff via a 10 step process.
💬 1🔄 0⭐ 0
GavGGavv@phpc.social
Jul 10, 2024, 8:55 AM
@hellpat @frederic @mxbck I was going to share a link to a chrome extension I built a few years ago for generating CSPs based on the current page's resources, but it looks like Caspr blows it out of the water 😂 fair play. It even has graphs and colours. Thanks for sharing.
💬 0🔄 0⭐ 0
Dave 🧱 :cursor_pointer:DavidDarnes@mastodon.design
Jul 8, 2024, 8:47 PM
@mxbck 🌶️
💬 0🔄 0⭐ 1
Richard SpenceleySpence1115@mastodonapp.uk
Jul 8, 2024, 9:21 PM
@mxbck I can do you one worse. Marketing have access to GTM and can add whatever they want...
💬 1🔄 0⭐ 0
Careycarey@mastodon.nz
Jul 8, 2024, 10:00 PM
@Spence1115 @mxbck ... and everything they add shows up as a red thread-blocking bar in the browser's performance tools.
💬 1🔄 0⭐ 0
Richard SpenceleySpence1115@mastodonapp.uk
Jul 8, 2024, 11:02 PM
@carey @mxbck then a bug comes in complaining the site is too slow, coming from... Marketing!
💬 0🔄 0⭐ 0
Max Fenton (defunct)maxfenton@mastodon.cloud
Jul 8, 2024, 9:37 PM
@mxbck
*pastes this into slack*
*slack links the domain polyfill dot io*
💬 0🔄 0⭐ 0
Claudio Zizza 🦜SenseException@phpc.social
Jul 9, 2024, 7:33 AM
@mxbck wget http://some-website/install | sh
💬 0🔄 0⭐ 0
Emilis 🇺🇦emilis@fosstodon.org
Jul 9, 2024, 8:53 AM
@mxbck Google Tag Manager should be blocked at the ISP level. Convince me otherwise.
💬 0🔄 0⭐ 0
mirabilos🐈‍⬛mirabilos@toot.mirbsd.org
Jul 9, 2024, 9:47 AM
@mxbck nevermind that it’s also a GDPR violation #DSGVO
💬 0🔄 0⭐ 0