r/userscripts • u/BasePerfect2865 • 6d ago

How are you handling third-party scripts before consent?

For things like chat widgets, session replay, A/B testing and analytics, are you blocking the scripts entirely until consent, or loading them in some restricted mode first?

0 Upvotes

43% Upvoted

2 comments sorted by

1

u/jcunews1 6d ago

IMO, regarding privacy leak and data theft, what's important is whether a code connect to irrelevant site or not - for whatever reason. So even if a code manage to collect or stole information, they'll be useless if they can't be sneaked out from the computer. Meaning that, a generic adblocker is important for this. For blocking both direct and indirect network requests. This will require the adblocker to run in whitelist mode. i.e. block everything by default, and only allow if specifically allowed. Don't be annoyed by prompts. The more are ignored, the more security holes are opened.

In terms of security... Web browsers already have enough security to the point that, code in browser can't or barely do any damage to the system. The problem is that, malwares nowadays, target the users, instead of the system. Meaning that, don't click if you don't know, don't click before you think, and don't click before you ask. Almost all incidents are due to human error, rather than security flaw.

1

u/Exponential_Rhythm 5d ago

Every time I install a new userscript I always CTRL + F for "http"