4 ms·
I don't think you need SRI if you already have SCP with hash? SCP covers dynamically loaded scripts also, which should provide more security than SRI.
by paraditedc 8y ago
I don't think you need SRI if you already have SCP with hash?
SCP covers dynamically loaded scripts also, which should provide more security than SRI.
- kretor 8y agoI think you meant CSP (Content Security Policy), not SCP
- paraditedc 8y agoYeah I mean CSP - https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP Specifically script-src: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co... To many acronyms, my mind was probably thinking about SICP - https://mitpress.mit.edu/sites/default/files/sicp/index.html https://mitpress.mit.edu/sites/default/files/sicp/index.html