ELSEIF
Your brief EB
191 stories from 108 feeds 346 clusters Refreshed 1 minute ago next pull 21:21

TECH Signal 475

Cloudflare silently injects analytics JS snippet when switching nameservers

Hacker News 2 min read ↗ Original

Illustration only Photo by Redd Francisco on Unsplash

Cloudflare injects a JavaScript analytics beacon into sites when users switch their nameservers to Cloudflare, requiring manual opt-out through the Analytics dashboard.

WHY IT MATTERS

Site owners who expect their HTML-only or JS-free sites to remain unchanged after a DNS configuration switch may unknowingly carry tracking scripts. The opt-out setting is reportedly difficult to locate, meaning sites could serve scripts their owners never intended to deploy.

Written by elseif from the cluster below · every claim links back to a source

The three things worth knowing

01

Cloudflare injects a JavaScript analytics snippet into sites when nameservers are switched to Cloudflare

02

Site owners must manually navigate to the Analytics dashboard and disable the snippet to remove it

03

Commenters report the setting to disable the injected JavaScript is hard to find

THE CLUSTER

Same story, 1 feed.

ORDERED BY FIRST SEEN
Hacker News Tell HN: Cloudflare silently injects its analytics when you switch nameservers Open ↗