Hacker GitHub

← All repos

w3c/webappsec-subresource-integrity

View on GitHub ↗ ★ 82 HTML

WebAppSec Subresource Integrity

12 mentions on Hacker News by 10 people: 0 stories, 12 comments · first 2017-01-26 · latest 2026-01-26

Mentions per year 12 mentions · busiest year 2017 (2)
20082026
AllStoriesComments NewestTopOldest
  1. Enabling the `integrity ` attribute on iframes would help: https://github.com/w3c/webappsec-subresource-integrity/issue... But then you'd also want the frame content to use `integrity` on nested resoures. CSP frame-src can help for now.
    comment by spankalee · 2026-01-26 · in The browser is the sandbox
  2. …caching at browser-level the common external JS libraries, to achieve big performance improvements: https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by XCSme · 2023-05-03 · in JavaScript import maps are now supported cross-browser
  3. …code is correctly signed with an unknown key. [0] https://github.com/w3c/webappsec/issues/449 [1] https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by dane-pgp · 2022-03-11 · in How Cloudflare verifies the code WhatsApp Web serves to users
  4. …to use it for caching[2,3]. [1] https://developer.mozilla.org/en-US/docs/Web/Security/Subres... [2] https://github.com/w3c/webappsec-subresource-integrity/issue... [3] https://hillbrad.github.io/sri-addressable-caching/sri-addre...
    comment by mananaysiempre · 2022-02-19 · in Outlook just asked me if I want to upgrade to bigger ads
  5. …expected as obvious characteristics when writing this down. There is now an issue on the spec at https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by bugmen0t · 2021-07-16 · in Remote code execution in cdnjs of Cloudflare
  6. Not sure if you are referring about domain-local cache, or a cache shared between domains: https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by XCSme · 2020-10-11 · in Please stop using CDNs for external JavaScript libraries
  7. …and privacy issues if this cache is implemented plus it might lead to security problems: https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by XCSme · 2020-10-11 · in Please stop using CDNs for external JavaScript libraries
  8. …consider a shared cache" [1] https://docs.google.com/document/d/1XJMm89oyd4lJ-LDQuy0CudzB... [2] https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by SamHasler · 2019-11-04 · in Shared Cache Is Going Away
  9. …version. There's been talk ( https://hillbrad.github.io/sri-addressable-caching/sri-addre... , https://github.com/w3c/webappsec-subresource-integrity/issue... ) about allowing sites to opt in, but then you're opening up a new way of…
    comment by jefftk · 2019-11-01 · in Lack of cdnjs activity
  10. …the value to be way longer. [0] https://developer.mozilla.org/en-US/docs/Web/Security/Subres... [1] https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by TheAceOfHearts · 2018-12-30 · in Inter UI, a typeface designed for user interfaces
  11. …solutions (and/or join the conversation!) [5] https://news.ycombinator.com/item?id=13495482 [6] https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by niftich · 2017-04-05 · in Do not let your CDN betray you: use subresource integrity (2015)
  12. This issue is discussed here, with what I think is a workable solution: https://github.com/w3c/webappsec-subresource-integrity/issue...
    comment by btrask · 2017-01-26 · in Using Immutable Caching to Speed Up the Web