FeatureFuel
2

Add SRI to tracking code

Source: umami-software/umami#1352 · opened by @Twisterado
Hi, thank you all for this awesome project!

I'd like to propose the idea of using SRI (Subresource Integrity) to make my websites just a bit more secure. This feature allows browsers to verify the integrity of loaded scripts (like the tracking script by umami) with the help of a hash.
More information on this can be found at [mdn web docs](

The hash could be calculated automatically and added to the tracking code shown in the settings. This would make it a lot more convenient.

Just one drawback occurred to me: whenever the tracking script is changed (e.g. when updating umami?), the hash would have to be updated (manually) on the page containing the tracking code.
Maybe this is no big issue as the script is not updated too often or there is some better idea?

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests