
12/8/2021 · Matthew Prince, John Graham-Cumming
What this post added
This post announces the acquisition of Zaraz, a company that provides a sandboxed environment for third-party scripts on websites. It details the security risks associated with embedding third-party JavaScript, such as performance degradation and data theft, using an analogy of a pharmacy giving keys to a stranger. The post highlights how Zaraz, built on Cloudflare Workers, mitigates these risks by strictly controlling script behavior, preventing unauthorized access to sensitive data like cookies and credentials, and ensuring that compromised scripts do not impact website rendering or security. It also mentions that Zaraz technology will be made available to Enterprise customers immediately and a free beta version will be available to all customers.