I appreciate that the only JS scripts Beehaw seems to load are from beehaw.org. Usually NoScript shows like two full pages of domains, and (at least—you know, the obvious ones like xyzads4you.com) half of them are for ads and “analytics”.
JS is first-party only, but as a PSA, Lemmy does not proxy images, so for someone could use ![](https://example.com/tracker.png), and loading the comment will contact example.com.
I appreciate that the only JS scripts Beehaw seems to load are from
beehaw.org
. Usually NoScript shows like two full pages of domains, and (at least—you know, the obvious ones likexyzads4you.com
) half of them are for ads and “analytics”.JS is first-party only, but as a PSA, Lemmy does not proxy images, so for someone could use
![](https://example.com/tracker.png)
, and loading the comment will contactexample.com
.Yeah. Good point. Might be a good feature to add…