Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement sriHashesStrategy for CSPOptions #51

Open
castarco opened this issue Mar 29, 2024 · 0 comments
Open

Implement sriHashesStrategy for CSPOptions #51

castarco opened this issue Mar 29, 2024 · 0 comments
Labels
csp Content-Security-Policy devex Development Experience enhancement New feature or request performance Performance sri SubResource Integrity

Comments

@castarco
Copy link
Contributor

As it can be seen in

// sriHashesStrategy?: 'all' | 'perPage' // TODO: Enable in the future

We intend to implement a feature to decide how "specific" we are at the time of loading SRI hashes into our CSP headers.

The goal of this feature is to allow the developers to decide whether they want to minimise the size of their CSP headers, or to ensure compatibility with the new View Transitions feature (which can cause some problems if the loaded pages after transition bring into scope new scripts/stylesheets that were not allowed by the CSP header).

@castarco castarco added enhancement New feature or request performance Performance devex Development Experience csp Content-Security-Policy sri SubResource Integrity labels Mar 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
csp Content-Security-Policy devex Development Experience enhancement New feature or request performance Performance sri SubResource Integrity
Projects
None yet
Development

No branches or pull requests

1 participant