3 ms·
They should have at least have something like HTML Subresource Integrity[0], including a hash so at least changes to what comes back from the import hasn't chan
by cbm-vic-20 2y ago
They should have at least have something like HTML Subresource Integrity[0], including a hash so at least changes to what comes back from the import hasn't changed.
[0] https://w3c.github.io/webappsec-subresource-integrity https://w3c.github.io/webappsec-subresource-integrity
- junon 2y agoYes, though it's not enforced when it should be.