CheckoutScripts6.4.3 · 11.6

cdnjs.cloudflare.com in a checkout page script inventory

Fonts and CDNexecutes on 9 of themvendor identified

cdnjs.cloudflare.com appeared on 13 of the 187 United States store cart pages we read on 30 August 2026, which is 7% of them, and on 9 it was loaded by a script or iframe tag, meaning it executed in the page.

01

What it is

Public open-source library CDN.

Source: the title and description published at cloudflare.com, read on 30 August 2026. Quoted there as “Cloudflare: Build for the agent era”.

02

What to write in the justification column

Pin the exact version and add a subresource integrity hash.

This is a starting sentence, not an assessment. Requirement 6.4.3 wants your reason, written by someone at your company who can defend it.

03

Stores where we saw it

10 of 13

Up to ten examples from our scan. These are public storefronts and the observation is only that the host appeared in the HTML of their cart page on 30 August 2026.

kyliecosmetics.comhuel.commisfitsmarket.comimperfectfoods.comholyland.combokksu.comkettleandfire.comcotopaxi.comspanx.commvmt.com
04

Where to look next

Other hosts on cloudflare.com

Other fonts and cdn hosts

All 448 hosts in the directory · Scan your own checkout page

Categories in this directory: Payment, Tag manager, Fraud and security, Consent, Analytics, Advertising, Email and SMS, Personalisation, Reviews, Chat and support, Loyalty, Subscriptions, Shipping and returns, Media and social, Fonts and CDN, Merchant-owned, Unclassified.