2 ms·
Just a reminder: you probably shouldn't be placing untrusted third-party JavaScript files on your site. At least audit and mirror the file on your own server.
by tlrobinson 13y ago
Just a reminder: you probably shouldn't be placing untrusted third-party JavaScript files on your site.
At least audit and mirror the file on your own server.
- paulirish 13y agoFYI to anyone considering: the `window.$` global is assigned to `document` in here. Someone would need to refactor the JS before it's safe to consider including.
- jiggy2011 13y agoIt's also served over standard HTTP, so the script itself could be MITMd even if the original is safe.
- sigkill 13y agoI'm not a developer of any sort and this is exactly what I was thinking. "What's the guarantee that they don't change the code inside the .js file? I would've already provided them a hardlink and long forgotten about it by the time they start their shenanigans".