This article was originally posted on www.brianemilius.com/static-site-comments/, 2019-07-23. Visit www.brianemilius.com/blog for more content.
...
For further actions, you may consider blocking this person and/or reporting abuse
Nice! I went the Disqus way though for comments on my static blog... Was pretty simple to setup, just dropping a script. I will have to try this one out to understand and compare them. Thanks for sharing!
My pleaure!
I used disqus myself a while back and it is real simple to set up. My concern with disqus, though, was performance (really heavy scripts) and the rather massive amount of trackers it comes with. That's really what lead me to try other things.
Let me know if you try this one out, and how it goes :)
The page script can be accessed and hence the ClientID and Clientsecret. Doesn't that pose any security issues?
Requests to a github app are limited to the scope of the domain the app is created for, so it really doesn't matter. The app will only accept requests from the domain(s) it was created for.
I have the same concern. Exposing Github clientSecret token on the frontend has never been a good idea.