Hacker News new | ask | show | jobs
by mavhc 1143 days ago
Subresource Integrity fixes that: "hmm, must be a bug at Google's end"
1 comments

It really doesn’t fix it, since the whole point of GTM is to allow arbitrary code execution on any page by marketing teams. (Yes, this is as bad of an idea as it sounds)
You just don't allow GTM, citing a security and GDPR risk
More like GDPR violation thanks to Schrems II.