3 ms·
Right. Subresource integrity checks eliminate the need to trust the source of the subresource, but not the main resource (the HTML response that bootstraps the
by TimTheTinker 6y ago
Right. Subresource integrity checks eliminate the need to trust the source of the subresource, but not the main resource (the HTML response that bootstraps the app).
But I'm willing to bet 1Password and the like never trusted third parties to host <link> and <script> assets anyway.