3 ms·
As far as anyone's been able to tell, I think the third party JavaScript files were hosted on the same BA server as the website itself, so subresource integrity
by makomk 6y ago
As far as anyone's been able to tell, I think the third party JavaScript files were hosted on the same BA server as the website itself, so subresource integrity wouldn't help - the hacker could just change the tags loading the JS so that the integrity checks passed.
- dkdk8283 6y agoIf this is true then they should’ve moved JS to a CDN or something and used SRI.