Skip to content

Cloudflare MITM included in the self-hosted codebase #1580

@lee-b

Description

@lee-b

Describe the bug

This self-hosted codebase calls out to cloudflare, unexpectedly.

Cloudflare is a centralising, filtering, essentially MITM attack on the distributed design of the internet -- it seems fine, until they decide to block you for some arbitrary reason (such as "too many" search requests, very relevantly), then you find out you are arbitrarily disenfranchised from most of the major internet sites, with little recourse.

Cloudflare has no place in a self-hosted service running on one's own network. It should be removed, disabled by default, or at least very easily disabled.

Evidence

<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">

<script src="https://cdnjs.cloudflare.com/ajax/libs/showdown/1.9.1/showdown.min.js"></script>

Expected behavior

Self-hosted service that connects to no SaaS services, other than what admins configure it to connect to by providing API keys.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions