3 ms·

Use Subresource Integrity: https://www.w3.org/TR/SRI/ https://www.w3.org/TR/SRI/

• youngtaff 2y ago
  What’s to stop a CDN rewriting the integrity attributes?
  • compressedgas 2y ago
    The primary HTML page which contains the integrity attributes is not served from a CDN as it is dynamic and not able to be cached. Cloudflare isn't a CDN; It is a MITM.
    • youngtaff 2y ago
      Most large sites run all their traffic inc HTML through their CDN and the CDN is capable of manipulating the traffic e.g. add headers, rewrite content Every CDN is effectively a MITM not just Cloudflare