Implementing SRI hashes for Alpine via CDN #4293
HeartthrobRob
started this conversation in
4. General
Replies: 1 comment
-
Well, the main showed links are not version bound links, so they can't be hashed. there is just the one that could use them. But the docs are in this Repo. So you can make the PR to add it to that spot. :) |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Have the dev team considered updating the CDN link on the docs to include a server-side SRI integrity hash? These are generated from sites like: https://www.srihash.org/ and protect against server-side malicious activity.
Rationale documented here (specifically last paragraph): https://blog.wesleyac.com/posts/why-not-javascript-cdn
Beta Was this translation helpful? Give feedback.
All reactions