search

OrchardCMS / Orchard

Orchard is a free, open source, community-focused Content Management System built on the ASP.NET MVC platform.
https://orchardproject.net
BSD 3-Clause "New" or "Revised" License
2.37k stars 1.12k forks source link

Feature Idea - Security - Subresource Integrity #7172

Open rtpHarry opened 7 years ago

rtpHarry commented 7 years ago

Not something I am likely to get around to but it should be considered for integration in Orchard as Orchard has built in CDN support:

Basically its a new feature that lets you generate a hash of the expected CDN contents and the browser will verify it before it loads it.

sebastienros commented 7 years ago

It's already in Orchard2's resource manager BTW.

rtpHarry commented 7 years ago

I was just looking around and noticed there was a taghelper already out for core:

Linking to the article as it has some gotchas in it which could be useful for the o1 implementor.