4 ms·
Just thinking about this, what's needed is some kind of trusted public cdn that you can send files to but cannot change so that library writers can point toward
by samwillis 14y ago
Just thinking about this, what's needed is some kind of trusted public cdn that you can send files to but cannot change so that library writers can point towards a cdn hosted version of the library without running one themselves and removing security vulnerability.
- simonbrown 14y agoOr a hash attribute to file and script tags. Of course, either case would mean redment wouldn't be able to update it.