Discussions » Greasy Fork Feedback
Updates to external code policy
What about including famous scripts like these?
- Google Translate - https://translate.google.com/translate_a/element.js
- Google Analytics - https://ssl.google-analytics.com/ga.js - needs
@antifeature tracking
- Google Tag Manager - https://www.googletagmanager.com/gtag/js - needs
@antifeature tracking
- JWPlayer or some other famous player, I don't remember exactly
- JQuery - https://code.jquery.com/*.js
So far I allowed these because a) they can be trusted as these exact URLs are served to millions/billions of people, b) it's hard to track updates of proprietary code, c) some of them simply don't work when loaded from another domain, d) in case of JQuery the reason is that tons of web developers are used to load it from the official site.
All added to the allow list except jQuery, which was already there.
https://greasyfork.org/en/help/external-scripts has been rewritten to be more clear (may not be updated in other languages yet). A few things have been made explicit: