question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Remove third party CDN libraries and dependencies

See original GitHub issue

There is growing concern about web surveillance, both by governments and the private sector. It is noted that including libraries from third parties, such as Google or Facebook, allows them to track people.

Please consider removing third party tracking software from Sovereign. Rather, include any necessary fonts, media, etc, in the project source. This way, Sovereign is truly sovereign.

Examples

In head.html are the following snippets:

<!-- Google -->
<script src="https://ajax.googleapis.com/ajax/libs/webfont/1.4.7/webfont.js"></script>

When clients load content from googleapis.com, Google is able to track them across the web.

There is also a link to Amazon CDN in the head.html:

<meta property="og:image" content="https://s3-us-west-2.amazonaws.com/democracyearth/landing/earthflag.jpg">

Additionally, when starting a fresh instance of Soverign, there are server console warnings about several third party services:

  • Amazon Web Services
  • Mailgun
  • Facebook
  • Twitter
  • Google Analytics

Corporate nation-states

In effect, when we rely so heavily on centrally controlled, third-party services, we are simply reflecting the global corporate hegemony we are trying so hard to disrupt.

screenshot_20161216_123410

References

Issue Analytics

  • State:closed
  • Created 7 years ago
  • Reactions:9
  • Comments:6 (5 by maintainers)

github_iconTop GitHub Comments

2reactions
santisiricommented, Dec 14, 2016

Couldn’t agree more with this. Great observation, will do.

(We’ll be integrating with IPFS soon, so that should help avoid us calling AWS)

0reactions
santisiricommented, Jan 6, 2017

Excellent work.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Remove third party CDN libraries and dependencies · Issue #87
It is noted that including libraries from third parties, such as Google or Facebook, allows them to track people. Please consider removing third ......
Read more >
Remove Third-Party Dependancies (No CDNs) - Drupal
Here's a list of the affected code and code changes used to remove third-party dependancies... /themes/contrib/adaptivetheme/at_core/at_core/ ...
Read more >
Managing Third-Party Assets Security Risks in Your Web Apps
Collaborating with the author/vendor of the dependency to solve the vulnerability. Find a workaround to prevent the vulnerability exploitation.
Read more >
Please stop using CDNs for external JavaScript libraries
If you want to use some library, it's up to you to get it, and its dependencies, check the versions are compatible and...
Read more >
How do you remove 3rd party library? Create a SHIM! - YouTube
When taking on a dependency like a 3rd party library, people often create their abstractions as a wrapper around it.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found