3 ms·
To be real, any time you visit any site you're running 3rd party code you didn't invite. NPM modules, random scripts from CDNs or stored off in a /libs director
by epmatsw 10y ago
To be real, any time you visit any site you're running 3rd party code you didn't invite. NPM modules, random scripts from CDNs or stored off in a /libs directory, hardly any sites are built entirely on code hosted or written by the party running that site. Ads get a bad rap, but if you're running JS on the modern web it's not even the biggest culprit.
- intrasight 10y agoTrue, but when I say "3rd party code" I was specifically referring to code coming from a 3rd party server and therefore not under the control of the 1st party. If the site I visit hosts the code then I trust it because I trust the 1st party (not saying that's necessarily a good idea, but it's my current philosophy). I have uBlock Origin set to block any 3rd party requests, so I do have to explicitly "invite" any such code/resources. And you can tell uBlock to remember those invites. This feature has made the web bearable again.