Skip to content

Third-party resources #285

@tacerus

Description

@tacerus

https://get.opensuse.org/leap/16.0/ connects the user to www.youtube.com and further to hosts such as googleads.g.doubleclick.net without asking for consent. This is a privacy concern and potentially conflicting with data protection regulations.

Best would be to not load third-party assets at all - either put a plain link the user has to actively click to open the third-party website, or, if embedding is preferred, store videos on our servers and load them from there.

If we really want to embed videos directly from YouTube, the player should be guarded by a consent prompt and link to youtube-nocookie.com (Google's so called "privacy enhanced" embedding).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions