T

0fc8264927 fix: comment scripts bypass cookie consent (#1308 )

* fix: comment scripts bypass cookie consent

When GDPR cookie consent is enabled, the comments container is simply
hidden with CSS. However, this still allows all third-party script
tags within the container to be evaluated and downloaded by the
browser.

This PR uses the <template> tag which stops inner scripts from evaluating.
Once consent is granted, the template content is cloned and inserted
into the container, and the scripts are manually loaded in order.

* refactor(comments): move consent-gated loader to TS asset

* fix(comments): add integrity attribute to comments consent script

* style: align comments consent docs and naming

* refactor(comments): simplify script handling

---------

Co-authored-by: Jimmy Cai <jimmy@cai.im>

2026-04-26 18:51:22 +02:00

.ci

chore: update Hugo version to 0.160.1 in build script

2026-04-26 13:43:09 +02:00

.github

docs: update some invalid documentation links (#983 )

2024-03-27 11:09:17 +01:00

archetypes

refactor: migrate page visibility control from Params.hidden to the new build.list parameter. (#1249 )

2026-01-27 12:00:40 +01:00

assets

fix: comment scripts bypass cookie consent (#1308 )