4 ms·
For truly locked-down environments that's the way to go. You can only be sure the code will always be the same if it's 100% local and offline, or verifying sign
by HPsquared 2y ago
For truly locked-down environments that's the way to go. You can only be sure the code will always be the same if it's 100% local and offline, or verifying signatures somehow.
- mattigames 2y agoYou can verify signatures of JS and CSS files to make sure they are only loaded if they are exactly what you expect them to be by using the "integrity" parameter, see https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
- kopirgan 2y agoYeah. Guess it'll involve some trade off in terms of UI.