Live data from Hacker News

You shouldn't hotlink someone else's JavaScript

beta.whatispolymath.com

101–102 of 102 posts

Re: You shouldn't hotlink someone else's JavaScript

#101
post #65
post #3

Screenshot for potential future confused HNers when Polymath realizes it and uses a real CDN: http://i.imgur.com/A8JzHtK.png

Thank you. At first, I didn't see anything of interest and briefly wondered why I was at a site that had nothing to do with the HN subject. It hit me that the submission was to a demonstration rather than an article, so I temporarily instructed Noscript to allow all domains used by the page. Sure enough, now the banner appeared. But that speaks to another reason to not use too many scripts hosted by third-parties. It…

Don't forget that sometimes you need to allow the site's CDN domain as well.

The problem with Noscript is that it doesn't seem to differentiate between allowing a domain when it's actually a site you're visiting (say, facebook.com) and when it's a domain that a completely different site is trying to load content from. A straight whitelist is too "dumb" for today's web.

Re: You shouldn't hotlink someone else's JavaScript

#102

Earlier quoted context omitted.

Sorry, what I meant was that if you think these are important features, the README.md in that git repo describes the process to get them added.

I also feel that the entire spec for HTTP 2 is misguided, so I don't think most of my recommendations would be welcomed.

There's only one way to find out... ;-)
Post reply on HN