I recently shared a notebook with a mailing list, and one of the list members objected to the “security blunder” of pulling in resources from Gist and jsdeliver. This particular person runs NoScript on Firefox, it should be said. By design, Observable is friendly to pulling resources from other si…

CORS and User Trust

mootari September 27, 2019, 1:14pm 2

Did that person happen to expand on their concerns and expectations? Or did they refuse to turn off / adjust NoScript out of principle?

1 Like

Topic		Replies	Views
Suggestion: proxy calls to private-per-user-per-notebook whitelisted urls	2	941	September 11, 2019
Accessing CORS-less resources from notebooks Community Help	5	857	September 11, 2019
Do user inputs on a public notebook ever touch Observable's servers? Community Help	3	329	March 26, 2021
Source control & Observable Community Help	7	959	April 23, 2020
Clickjacking attacks and notebook security? Community Help	9	1090	May 9, 2022