|
|
|
|
|
by rablackburn
1552 days ago
|
|
> It also leaks the usage to jquery, … This is the first time I’ve read someone refer to loading jquery as a data leak. Ideally they shouldn’t be using jquery, or just shipping it with the app/self-hosting. But for the general case, are you saying your ideal would be an app prompting you for permission before it loaded any external resource from any url? Even one as ubiquitous as jquery? How is the fact that your IP address requested a copy of jquery, one of the most downloaded JavaScript libraries of all time, any kind of meaningful signal? I’d be more worried about it as an attack vector than a privacy infringement. |
|
Loading any framework script not hosted on the site the app originates is the same kind of leak as the facebook pixel. jquery gets my IP, access time and referrer. They can cross-site track me over all pages that load their scripts.
I also use frameworks scripts, only I host them locally to counter this kind of leakage.