ryancdotorg/VerifyJS
View on GitHub ↗ ★ 10 JavaScript
VerifyJS - Load JavaScript from a CDN, no trust required!
3 mentions on Hacker News by 1 person: 0 stories, 3 comments · first 2014-09-24 · latest 2015-10-22
20082026
-
…verifies the content hash, then injects it into the page if it looks good. I have a PoC on github https://github.com/ryancdotorg/verifyjs - same sort of thing could be modified to support signed files rather than hashed, which SRI can't do.
comment by ryan-c · 2015-10-22 · in What Experts Love and Hate About CDNs -
…that implements this sort of behavior in a script loader a while ago, if you're interested: https://github.com/ryancdotorg/VerifyJS
comment by ryan-c · 2015-07-14 · in How I got XSS’d by my ad network -
It's a proposal. I made this thing: https://github.com/ryancdotorg/VerifyJS but it requires CORS headers from the CDN and isn't well tested.
comment by ryan-c · 2014-09-24 · in Was jquery.com compromised?