-
Have you considered using [subresource integrity](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) and reproducible builds for a browser library?
Developers could use f…
-
## CVE-2021-27290 - High Severity Vulnerability
Vulnerable Libraries - ssri-6.0.1.tgz, ssri-8.0.0.tgz
ssri-6.0.1.tgz
Standard Subresource Integrity library -- parses, serializes, generates, and v…
-
**Describe the bug**
ERESOLVE unable to resolve dependency tree
**To Reproduce**
- ng new my-first-project
- cd my-first-project
- npx sb@next init
- rm -rf package-lock.json node_modules
- …
-
## Current Behavior
Current version `"webpack-subresource-integrity": "1.1.0-rc.6"`
webpack-subresource-integrity reports security issue: Tags are injected with integrity="undefined" on v1.5.0…
-
### Filter affected:
`||instant.page^$third-party` in easyprivacy/easyprivacy_trackingservers.txt, introduced in 6d8f54be4fd90c6fc27003323dffadb6d11c7455 by Fanboy (@ryanbr).
### 1st/3rd-p…
-
I don't know if this already came up, but if security is a major concern and referencing modules via http(s) should be possible, then maybe there should be a way to use [subresource integrity](https:/…
-
I have the following code:
https://github.com/MariosKaramanis?tab=repositories
Here you can see the two repositories I am using.
marioskaramanis.github.io contains the public contents after ru…
-
## Describe the bug
This tool can only generate hashes whose integrity is encrypted using sha-512.
## To Reproduce
When some dependency is encrypted by sha-1,The SBOM generated by the tool does…
-
We need to secure our download.
https://developer.mozilla.org/fr/docs/Web/Security/Subresource_Integrity
Transferred from: https://gccode.ssc-spc.gc.ca/iitb-dgiit/nw-ws/sgdc-cdts/-/issues/164
-…
-
Maybe you could consider adding support for this [signed pages](https://github.com/tasn/webext-signed-pages) browser add-on.
The idea is simple:
* Devs sign the page with PGP and use Subresource I…