codimd
codimd copied to clipboard
UseCDN: true likely to break VPNs and tor
trafficstars
Somebody sent me a link to a pad hosted at https://hackmd.c3d2.de, I've tried to open it and got unstyled html:

I thought ublock might've blocked something essential but the blocklist was empty. Opening the console I got SRI failures for cdnjs.cloudflare.com, which seemed odd. I've tried to open one of the links of a js file and got this:

There isn't much thing we can do to solve issue of ISP or TOR network.
You can try to set useCDN: false and see if that works.
A few ideas that could be explored:
- Remove the UseCDN option and always self-host assets
- Default UseCDN to false, so only instances that explicitly want cloudflare assets depend on cloudflare
- Add a comment next to the setting to document that not setting it to false is going to cause issues for vpn and tor users