2
Add SRI to tracking code
Source: umami-software/umami#1352 · opened by @Twisterado
Hi, thank you all for this awesome project!
I'd like to propose the idea of using SRI (Subresource Integrity) to make my websites just a bit more secure. This feature allows browsers to verify the integrity of loaded scripts (like the tracking script by umami) with the help of a hash.
More information on this can be found at [mdn web docs](
The hash could be calculated automatically and added to the tracking code shown in the settings. This would make it a lot more convenient.
Just one drawback occurred to me: whenever the tracking script is changed (e.g. when updating umami?), the hash would have to be updated (manually) on the page containing the tracking code.
Maybe this is no big issue as the script is not updated too often or there is some better idea?
I'd like to propose the idea of using SRI (Subresource Integrity) to make my websites just a bit more secure. This feature allows browsers to verify the integrity of loaded scripts (like the tracking script by umami) with the help of a hash.
More information on this can be found at [mdn web docs](
The hash could be calculated automatically and added to the tracking code shown in the settings. This would make it a lot more convenient.
Just one drawback occurred to me: whenever the tracking script is changed (e.g. when updating umami?), the hash would have to be updated (manually) on the page containing the tracking code.
Maybe this is no big issue as the script is not updated too often or there is some better idea?
No pledges yet. Be the first to back this.
Comments
Similar requests
Non-technical way to block tracking for internal traffic
12 votes · 0 comments
Feature request: Official MCP support — create websites & read tracking codes via AI assistants
5 votes · 0 comments
Tracking user by city name.
1 vote · 0 comments
Heartbeats for more accurate visit duration tracking
10 votes · 0 comments
Exclude pages from history with regular exception
1 vote · 0 comments
No comments yet.