subresource-integrity Questions
2
Solved
I was wondering if anyone knew of a possible way to activate Subresource Integrety with Angular-Cli. According to the following link: GitHub Pull Request It would be a feature (or a future feature)...
Exceptive asked 17/7, 2017 at 6:47
2
Solved
We're using puppeteer and sometimes playwright to run some integration tests. We mock some of the target page's script dependencies, which causes subresource integrity hash mismatches.
Failed to f...
Picardi asked 6/10, 2021 at 17:56
2
Subresource integrity seems to be an awesome stopgap allowing to use third-party controlled HTTP-served resources in a secure way.
However the spec considers HTMLLinkElement and HTMLScriptElement i...
Pantheas asked 27/1, 2016 at 0:4
0
Background
I have a site which uses Google analytics, like
<script
src="https://www.google-analytics.com/analytics.js"/>
and use Mozilla Observatory to test it for security flaws...
Majors asked 5/9, 2020 at 17:16
3
Bootstrapcdn recently changed their links. It now looks like this:
<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css"
rel="stylesheet"
integrity="sha256-MfvZlk...
Mcgregor asked 16/8, 2015 at 20:24
0
I have Subresource Integrity (SRI) enabled in the Content Security Policy (CSP) headers.
How can I integrate google analytics? Using a hash for their script will probably break within a few days w...
Cleistogamy asked 8/7, 2019 at 6:12
2
Solved
I would like to make a soft integration for Subresource Integrity attributes, so be sure that I did not break the application, but only to show a warning that I need to fix some places.
Is there a...
Articulate asked 26/3, 2019 at 15:8
3
Solved
Where do i find the sub resource integrity value for the script //maps.google.com/maps/api/js?
For example:
<script src="//maps.google.com/maps/api/js" integrity="sha256-????" crossorigin="an...
Massage asked 7/9, 2016 at 16:14
3
Solved
I'm implementing subresource integrity checks. I'd like to implement a fallback such that 1) the browsers loads from my CDN, performs the integrity check and carries on or 2) in the event of failin...
Floe asked 3/11, 2016 at 18:18
1
<script> accept integrity attribute, so I can load a module safely:
<script type="module"
src="https://example.com/module.mjs"
integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7u...
Pycnometer asked 3/10, 2018 at 22:46
1
Solved
I recently discovered the following nifty little site for generating SubResource Integrity (SRI) Tags for externally loaded resources. For example, enterring the latest jQuery URL (https://code.jqu...
Endometrium asked 30/8, 2018 at 16:16
1
Solved
I would think that specifying Subresource Integrity hash on a resource should allow web browsers to cache much more aggresively, and basically always reuse the local copy of the resource.
Is stron...
Danutadanya asked 29/5, 2018 at 8:13
2
Solved
I am using bootstrap icons in my project which gives me error
Subresource Integrity: The resource
'http://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css'
has an integrity attri...
Cottar asked 10/2, 2016 at 18:36
1
How would one employ SRI for resources included by a .css file included over a CDN.
For example, if you include this in your HTML:
<link href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7....
Arvizu asked 3/1, 2017 at 16:17
1
Has anyone came across this problem with Google Chrome and SRI Hash, it keeps throwing the same error in the console window:
Failed to find a valid digest in the 'integrity' attribute for
resou...
Margotmargrave asked 18/5, 2017 at 9:18
1
Solved
How to cryptographically verify web page requisites in HTML?
For example, if I have some external resource like an image, a style sheet or (most importantly) a script on a (potentially untrusted) ...
Kaylyn asked 27/4, 2016 at 19:34
1
I have an angular application with below index.html file
Consider in my index.html page I have the following code for SRI (SubResource Integrity)
<html>
<head>
<meta http-equ...
Registered asked 18/12, 2015 at 4:27
1
Solved
I was on bootstrap's site, and I recently noticed that their CDN links contained an integrity attribute with an SHA-384 key.
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/j...
Gabriello asked 23/12, 2015 at 5:12
2
Solved
Is there any implementation or specification for including a hash or signature in an attribute of a <script> tag, so that the browser can verify that the correct file was retrieved before execut...
Diablerie asked 26/3, 2015 at 3:28
1
© 2022 - 2024 — McMap. All rights reserved.