gdub01
Hey!
I know on squarespace and Shopify and a few other website builders they allow arbitrary code in the section of a site. They also have a way to add custom arbitrary html and JS often.
That said everywhere else I’ve read that is a bad idea lol.
I’m curious if you know what makes it safe for them? Is it because they only either serve content on a subdomain like whatever.squarespace.com or yourcustomdomain.com?
Otherwise if the site was available at yourhompage.com/theirwebsite they could steal session info?
Where Next?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Build Elixir applications with speed and confidence.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #ai
- #elixirconf-us
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Practical resources that improve the lives of professional developers.
Bringing learning, work and compliance together since 1987.
Producing high quality Elixir screencasts since 2017.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 1- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
lud
I guess it boils down to who is legally responsible for the code.
If you host your code yourself you can put whatever you want. If you host other people’s code on your domain but you made sure that they are responsible for it then you are fine I guess (I am not a lawyer though).
But safe, no, it is only as safe as the code is. If you will provide a CMS as a service you may quickly have to let people include js files script tags to provide whatever feature they want.