DescriptionShip Subresource Integrity
Removes the runtime flag for subresource integrity so it is enabled by
default. Enables the 'integrity' attribute for HTMLLinkElement and
HTMLScriptElement where a hash can be specified for the expected
content. If hash values do not match, fetch will be blocked.
Intent to Ship (and approvals):
https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/G3HY0qqTvw8
Spec: https://w3c.github.io/webappsec/specs/subresourceintegrity/
R=mkwst@chromium.org
BUG=355467
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=197494
Patch Set 1 #Patch Set 2 : Rebase on ToT #Patch Set 3 : Fixed virtual test results #
Messages
Total messages: 20 (10 generated)
|