Cloudflare analytics injection exposes the proxy trust boundary (news.ycombinator.com)
Several users confirmed that Web Analytics can add JavaScript when Cloudflare is proxying traffic, while DNS-only domains do not pass through that HTML-rewriting path.
The sharper complaint was the control surface: one commenter said they had to enable analytics merely to find the setting that disables it.
Sign in to save