5 ms·

I'm not a fan of the use of CDNs here. Why should I be trusting a third-party for your JavaScript? What is that CDN doing with this data? Why are there no subre

I'm not a fan of the use of CDNs here. Why should I be trusting a third-party for your JavaScript? What is that CDN doing with this data? Why are there no subresource integrity checks to verify the scripts aren't tampered with? At least with compiled output hosted first party I can have a little more trust in the code, but it'd also be reasonable to expect that the code is tree shaken is therefore consuming less bandwidth.

xigoi 4y ago
You can always download the code from the CDN and self-host it.
- mythz 4y ago
  Yep, also what the template does on install [1] [1] https://github.com/NetCoreTemplates/vue-mjs/blob/main/MyApp/postinstall.js https://github.com/NetCoreTemplates/vue-mjs/blob/main/MyApp/...
  - toastal 4y ago
    Well that's a relief