3 ms·
> do people still link to 3rd party copies of JavaScript libraries? Sadly yes. Occasionally, sites use Subresource Integrity (SRI, https://caniuse.com/subresou
by JoshTriplett 6y ago
> do people still link to 3rd party copies of JavaScript libraries?
Sadly yes. Occasionally, sites use Subresource Integrity (SRI, https://caniuse.com/subresource-integrity https://caniuse.com/subresource-integrity) hashes to ensure the scripts are identical to what they expect. But it still surprises me to see secure, sensitive sites loading third-party scripts.