2 ms·
You wouldn’t use an SRI integrity attribute on a non-versioned resource from a CDN.
by robin_reala 5y ago
You wouldn’t use an SRI integrity attribute on a non-versioned resource from a CDN.
- hsbauauvhabzb 5y agoI don’t recall ever seeing ‘don’t use SRI on non versioned resources’ - don’t get me wrong, it makes sense, but I’m a pentester and my clients know less than I do
- bugmen0t 5y agoTrue, that was somehow expected as obvious characteristics when writing this down. There is now an issue on the spec at https://github.com/w3c/webappsec-subresource-integrity/issues/102 https://github.com/w3c/webappsec-subresource-integrity/issue...