4 ms·
An update.
by hsbauauvhabzb 5y ago
An update.
- robin_reala 5y agoYou wouldn’t use an SRI integrity attribute on a non-versioned resource from a CDN.
- hsbauauvhabzb 5y agoI don’t recall ever seeing ‘don’t use SRI on non versioned resources’ - don’t get me wrong, it makes sense, but I’m a pentester and my clients know less than I do
- bugmen0t 5y agoTrue, that was somehow expected as obvious characteristics when writing this down. There is now an issue on the spec at https://github.com/w3c/webappsec-subresource-integrity/issues/102 https://github.com/w3c/webappsec-subresource-integrity/issue...