!GitHub last commit
!GitHub package.json version

hexo-plugin-commentbox

A Hexo plugin to integrate commentbox.io commenting system into your blog posts.

Disclaimer: This project is not affiliated with, endorsed by, or connected to commentbox.io in any way. It is an independent plugin created to integrate the commentbox.io service into Hexo blogs.

Installation

``bash
npm install hexo-plugin-commentbox --save
`

Configurations

$3

Visit https://commentbox.io to create account and project.

$3

To enable the plugin, add this to your _config.yml:
`yaml
commentbox:
enable: true
project_id:
`

Configuration Options:
- enable: Set to true to enable the plugin (default: false)
- project_id: Your commentbox.io project ID (required)
- url: Custom URL for the commentbox.io script (optional, defaults to unpkg.com CDN)

$3

Comments are enabled on all pages by default. To disable comments on a specific post or page, add this to the front matter:

`yaml
---
comments: false
---
`

Security Considerations

This plugin loads external JavaScript from unpkg.com/commentbox.io. Be aware:

- External scripts can access your page content and user data
- The script is loaded from a CDN without Subresource Integrity (SRI) verification
- Changes to the external script are outside your control
- Consider your site's Content Security Policy (CSP) requirements

For production use, consider:
- Implementing SRI hashes for script integrity verification
- Self-hosting the commentbox.io script
- Reviewing commentbox.io's privacy policy and terms of service

Development

$3

`bash
npm test
``

$3

The plugin includes unit tests covering:
- Plugin registration
- Enable/disable functionality
- Project ID validation
- Comment toggle per post/page
- HTML output generation

Contribution

Contributions are welcome! Please feel free to submit a Pull Request.

License

Apache 2.0