Privacy: Remove remote Google fonts, jquery, assets

[snogrammer]

Thank you for the opensource development and easy-to-use selfhosted app!

One thing that jumped out as soon as I got the app set up was that it is using remote Google fonts that include trackers which jumps out as a security and privacy concern. The fonts can be downloaded and used as local assets. Google is a major reason that many people selfhost things to avoid being tracked/spied on.

Jquery also seems to be hosted from Cloudflare.

[vabene1111]

hmm i am a very privacy focused person myself so this should definitly be fixed .. since this website is meant for small deployments anyway it should not have any performance implications so no reason to not include it in the static assets.

[vabene1111]

ok so i have just pushed some commits (7b17a1a and 6aedba0) to remove all external CDN dependencies. What i could not find was a dependency to google fonts. I remember playing around with fonts a while ago but i think i removed it. I also installed privacy badger to test it and could not find a page that loads google fonts.

Can you specify on what page you were on when you saw the google fonts warning ? Also if you want you can use the recipes:develop image to test the latest development build if you want.

[snogrammer]

Thank you for looking into that! I was creating a new recipe when I noticed privacy badger notifications. I'll try to test it out tomorrow.

[vabene1111]

closing this for now, if any new problems arise feel free to open a new issue