Tell HN: Cloudflare silently injects its analytics when you switch nameservers
摘要
作者在把域名解析切换到 Cloudflare 以启用 R2 存储桶自定义子域名服务时，发现 Cloudflare 未经告知就在其纯 HTML、无 JavaScript 的网站 textlog.cc 中注入了 JS 分析脚本。他需要进入分析仪表盘、添加站点后才能禁用该脚本。作者认为这种做法具有侵入性，认为此类功能应默认关闭、由用户主动选择开启，而非默认开启后再让用户手动关闭，并提醒其他用户注意这一行为。
荐读理由
切到 Cloudflare 托管静态站时它会默认往页面注入统计脚本，你可以在后台关掉，省得自己排查流量异常
原文
A few hours ago I switched my nameservers to Cloudflare in order to enable R2 bucket serving through my own subdomain, and I found out that it silently had injected a JS analytics snippet in my HTML-only JS-free site textlog.cc — I had to go to the Analytics dashboard, Add the site to the analytics and then disable the snippet. I find this approach entirely invasive, you should opt-in to features like that not have to opt-out. Just a warning out there to folks who might not be aware of this.
这条对你有帮助吗？