Security for the tracking script

[codasana]

Describe the feature you'd like to request

Is there a way to add security for the tracking script. Right now, I can add script to any number of sites and it will record data from everywhere. So, someone can embed the script in any website and it will record events. Is there a way in Tinybird to implement some security so that data from only predefined websites is recorded. I don't want to do this in the script itself as that can easily be modified.

Describe the solution you'd like

Add security so only verified domains can send data. Otherwise someone can misuse the script and send unwanted data.

Describe alternatives you've considered

No response

[alejandromav]

Hey there @codasana 👋

As of today, we don't have any mechanism in this starter kit to avoid that. Some options that come to my mind are:

1. Filter the undesired hits in your Tinybird workspaces, by adding a clause in your pipes
   

2. Deploy the middleware to Vercel Functions as described here, and modify this function in your own for with the implementation you prefer.

Would any of these alternatives work for you?

Thanks for your feedback