[GH-ISSUE #3226] [feature]: Move Fonts and all other packages to the local container - ensure CSP and Data Privacy #1067

Closed
opened 2026-03-16 18:22:21 +03:00 by kerem · 4 comments
Owner

Originally created by @GAS85 on GitHub (Aug 2, 2023).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3226

Originally assigned to: @liyasthomas on GitHub.

Is there an existing issue for this?

  • I have searched the existing issues

Summary

When I deploy my cool own hosted hoppscotch, in a Network stack I see that there are calls passing to the fonts.gstatic.com, fonts.googleapis.com and client.crisp.chat. This will violate my Data Privacy statement.
image

Please add option to move those packages into the container during the build, or do this per default.

Why should this be worked on?

This is major Data Privacy violation for most self-hosted apps, e.g.: https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/

Originally created by @GAS85 on GitHub (Aug 2, 2023). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3226 Originally assigned to: @liyasthomas on GitHub. ### Is there an existing issue for this? - [X] I have searched the existing issues ### Summary When I deploy my cool own hosted hoppscotch, in a Network stack I see that there are calls passing to the `fonts.gstatic.com`, `fonts.googleapis.com` and `client.crisp.chat`. This will violate my Data Privacy statement. ![image](https://github.com/hoppscotch/hoppscotch/assets/6813635/eb8cb61d-3425-4fdf-b34c-0a2ba908dd50) Please add option to move those packages into the container during the build, or do this per default. ### Why should this be worked on? This is major Data Privacy violation for most self-hosted apps, e.g.: https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/
kerem 2026-03-16 18:22:21 +03:00
Author
Owner

@liyasthomas commented on GitHub (Aug 2, 2023):

Hi @GAS85, thanks for suggesting this improvement and bringing the same to our attention. We'll soon release a patch with the suggested assets removed/locally bundled with the platform.

<!-- gh-comment-id:1662186744 --> @liyasthomas commented on GitHub (Aug 2, 2023): Hi @GAS85, thanks for suggesting this improvement and bringing the same to our attention. We'll soon release a patch with the suggested assets removed/locally bundled with the platform.
Author
Owner

@SunsetMkt commented on GitHub (Aug 21, 2023):

It would be helpful to allow users to disable Crisp Chat, since this never used in a self-deployed hoppscotch.

<!-- gh-comment-id:1685623820 --> @SunsetMkt commented on GitHub (Aug 21, 2023): It would be helpful to allow users to disable Crisp Chat, since this never used in a self-deployed hoppscotch.
Author
Owner

@liyasthomas commented on GitHub (Aug 21, 2023):

We're working on removing the in-app chat feature in the self-hosted instance. Expect the same in the next release tag, as early as in next week.

<!-- gh-comment-id:1685633498 --> @liyasthomas commented on GitHub (Aug 21, 2023): We're working on removing the in-app chat feature in the self-hosted instance. Expect the same in the next release tag, as early as in next week.
Author
Owner

@liyasthomas commented on GitHub (Aug 31, 2023):

Thanks for your patience and valuable feedback. This feature has been implemented in the latest release.

Closing this ticket as this feature is now available in the recent version. Feel free to reach out if you encounter any further concerns.

<!-- gh-comment-id:1701541249 --> @liyasthomas commented on GitHub (Aug 31, 2023): Thanks for your patience and valuable feedback. This feature has been implemented in the latest release. Closing this ticket as this feature is now available in the recent version. Feel free to reach out if you encounter any further concerns.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hoppscotch#1067
No description provided.