Barclays Bank Using Internet Archive as CDN for JavaScript Files?

Re:Barclays Bank Using Internet Archive as CDN for JavaScrip... by dreen on Friday July 03, 2020 @11:56AM (#23725054)

I work for a large media comp and this is exactly the reason we don't give editors access to GTM (or even all developers), nor do we allow tools such as Optimizely intended for A/B testing, and we went away from letting them paste HTML into articles to include custom elements.

Unfortunately, we still have lots of 3rd party stuff in GTM, and technically any ad can run random js on our sites. Thats where most problems come from these days.

Editors still technically have the power to brick a given site through our old inhouse CMS which has no proper access control levels, hopefully not for long...

[ Parent | on HN ]

Re:Barclays Bank Using Internet Archive as CDN for JavaScrip... by jefftk on Friday July 03, 2020 @01:28PM (#23725798)

> technically any ad can run random js on our sites

If you configure your ad network to run all ads cross-domain, then they are very limited. For example, in GPT (which I work on) you call "googletag.pubads().setForceSafeFrame(true)".

(Disclosure: speaking only for myself)

[ Parent | on HN ]