Skip to main content

Integrate surveys using npm instead of loading a script at runtime

Outbound

We cannot use external runtime scripts in our organisation due to security implications.

Is there an NPM module available for the surveys component? We need to package everything statically in our javascript bundles, otherwise we cannot use an external product.

What part of Outbound?
Posted by Robert Gründler ·
Status: Completed5 comments

Log in to comment and vote

Comments5

  • Bruno H changed status to Completed
    Team•

    Jul 24

    Pinned

    Surveys have been on the new stack for the last month, and they now use the SDK bundle, so there are no external resources being loaded for them anymore.

    If you’re packaging everything statically in your JavaScript bundles, this should fit that requirement.

  • Michael Ilger

    •

    Jan 28, 2025

    Hi@Bruno from Featurebase !
    It’s been a while since you responded to Robert’s question. Do you have any updates? Basically loading code from a remote server is an XSS threat we need to evaluate in detail.

    • Bruno H

      Team•

      Jan 28, 2025

      Hey @Michael Ilger, I completely understand the issue, but unfortunately, we probably will not get to this any time soon since we do not have the resources with our small team to prioritize this.

      • Michael Ilger

        •

        Jan 28, 2025

        Hi @Bruno from Featurebase I understand the problem you have in regards to team size and your backlog. We will analyze the possible threads we see for the integration and get back to you to see how they can be resolved.

  • Bruno H

    Team•

    Oct 4, 2024

    Hey @Robert Gründler,

    Definitely see why this is important, however, I am not yet sure when we could prioritize it as we haven’t heard a more general need yet.