Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
brightfire
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
3 ms
·
1.
▲
by
brightfire
8y ago
It's been interesting working with teams that have well-defined release management workflows and continuous integration with snapshotted npm/mvn dependencies, but still allow a third party like GA to inject JS that skips the QA qu
2.
▲
by
brightfire
8y ago
SRI won't protect you from: * Someone injecting malicious JS code into your checkout page * Non-static JS includes like Google Analytics But it works well for static assets like jQuery or other static JS resources.