4 ms·
> b) increasing the probability of malicious injection Subresource Integrity (SRI) [0] was designed to avoid this potential vulnerability. It's a brand-new bro
by garrettr_ 11y ago
> b) increasing the probability of malicious injection
Subresource Integrity (SRI) [0] was designed to avoid this potential vulnerability. It's a brand-new browser feature (jus t landed in Chrome stable, is riding the trains to Mozilla stable now) but it's worth taking a look at. Github is already using it [1].
[0]: http://www.w3.org/TR/SRI/ http://www.w3.org/TR/SRI/
[1]: http://githubengineering.com/subresource-integrity/ http://githubengineering.com/subresource-integrity/
- jamiesonbecker 11y agoAbsolutely! unfortunately it may take years before the majority of browsers use it. :(