I wanted to explore the extent to which some significant UK websites include SRI of JavaScript assets.
Put together on a Sunday, needs work, curious about how best to check for CSP and whether I've missed other risks beyond just JavaScript not protected by SRI.
1 comment
[ 2.9 ms ] story [ 63.6 ms ] threadI wanted to explore the extent to which some significant UK websites include SRI of JavaScript assets.
Put together on a Sunday, needs work, curious about how best to check for CSP and whether I've missed other risks beyond just JavaScript not protected by SRI.