Skip to content

fix: Require Subresource Integrity on every cross-origin script (0.1.17) - #30

Merged
csgillespie merged 2 commits into
mainfrom
fix/18-sri-cross-origin
Oct 16, 2026
Merged

csgillespie merged 2 commits into
mainfrom
fix/18-sri-cross-origin

Conversation

@csgillespie

@csgillespie csgillespie commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

0.1.16 → 0.1.17

  • The Subresource Integrity check now ignores inline and same-origin scripts, and needs integrity and crossorigin on every cross-origin script. One hashed script no longer passes the whole page.

Closes #18

🤖 Generated with Claude Code

https://claude.ai/code/session_01QVzHxqR2weizVuCKLw3fZm

@csgillespie csgillespie self-assigned this Oct 16, 2026
@csgillespie
csgillespie force-pushed the fix/18-sri-cross-origin branch from 07d8d17 to 1d2698a Compare October 16, 2026 11:17
@csgillespie
csgillespie merged commit dae93e1 into main Oct 16, 2026
5 checks passed
@csgillespie
csgillespie deleted the fix/18-sri-cross-origin branch October 16, 2026 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Subresource Integrity check passes partial coverage and fails inline scripts

1 participant