hexo-plugin-commentbox

A Hexo plugin to integrate commentbox.io commenting system into your blog posts.

Disclaimer: This project is not affiliated with, endorsed by, or connected to commentbox.io in any way. It is an independent plugin created to integrate the commentbox.io service into Hexo blogs.

Installation

npm install hexo-plugin-commentbox --save

Configurations

Create a project in commentbox.io

Visit https://commentbox.io to create account and project.

Enable the plugin

To enable the plugin, add this to your _config.yml:

commentbox:
  enable: true
  project_id: <your project id>

Configuration Options:

• enable: Set to true to enable the plugin (default: false)
• project_id: Your commentbox.io project ID (required)
• url: Custom URL for the commentbox.io script (optional, defaults to unpkg.com CDN)

Disable comments on specific posts or pages

Comments are enabled on all pages by default. To disable comments on a specific post or page, add this to the front matter:

---
comments: false
---

Security Considerations

This plugin loads external JavaScript from unpkg.com/commentbox.io. Be aware:

• External scripts can access your page content and user data
• The script is loaded from a CDN without Subresource Integrity (SRI) verification
• Changes to the external script are outside your control
• Consider your site's Content Security Policy (CSP) requirements

For production use, consider:

• Implementing SRI hashes for script integrity verification
• Self-hosting the commentbox.io script
• Reviewing commentbox.io's privacy policy and terms of service

Development

Running Tests

npm test

Test Coverage

The plugin includes unit tests covering:

• Plugin registration
• Enable/disable functionality
• Project ID validation
• Comment toggle per post/page
• HTML output generation

Contribution

Contributions are welcome! Please feel free to submit a Pull Request.

License

Apache 2.0