From 696cef261abda2e66c58a572157148c77322ae5b Mon Sep 17 00:00:00 2001 From: Charles Ewert Date: Sun, 7 Jun 2026 00:13:12 -0400 Subject: [PATCH] fix(analytics): point jsdoc footer tracker at first-party /_a The jsdoc footer still embedded the Umami tracker cross-origin (analytics.jellyrock.app/script.js), even though the live site already serves it first-party. Under the static-site CSP (script-src 'self' [+ 'unsafe-inline' on the doc carve-out], ADR-0006) a cross-origin script source is blocked, so a future docs regeneration from this jsdoc.json would reintroduce the May-2026 analytics-blackout footgun on api. Sync the source to the first-party path used everywhere else: /_a/script.js plus data-host-url so events post to the same-origin /_a/api/send proxy. --- jsdoc.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jsdoc.json b/jsdoc.json index e3aee69c5..535d2f0c2 100644 --- a/jsdoc.json +++ b/jsdoc.json @@ -49,7 +49,7 @@ "id": "jellyfin-link" } ], - "footer": "Automatically generated using JSDoc and the clean-jsdoc-theme." + "footer": "Automatically generated using JSDoc and the clean-jsdoc-theme." } }, "markdown": {