Share your ideas

Begin including subsource integrity as an option for including js libraries

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

Subresource Integrity (SRI) is a security feature that enables browsers to verify that files they fetch (for example, from a CDN (https://developer.mozilla.org/en-US/docs/Glossary/CDN) ) are delivered without unexpected manipulation. It works by allowing you to provide a cryptographic hash that a fetched file must match.

This is becoming a standard with web code hosted or offered by third parties and offering this would allow additional security and allow security teams to better confirm the files being included from libs.coremetrics.com and other IBM sources.

  • Guest
  • Feb 25 2020
  • Future consideration
What is your industry? Computer Services
What is the idea priority? High