search

WebKit / standards-positions

WebKit's positions on emerging web specifications
https://webkit.org/standards-positions/
240 stars 18 forks source link

Importmap integrity #335

Closed yoavweiss closed 1 month ago

yoavweiss commented 2 months ago

WebKittens

@annevk

Title of the spec

Importmap integrity

URL to the spec

https://github.com/whatwg/html/pull/10269

URL to the spec's repository

https://github.com/whatwg/html

Issue Tracker URL

No response

Explainer URL

https://github.com/guybedford/import-maps-extensions?tab=readme-ov-file#integrity

TAG Design Review URL

No response

Mozilla standards-positions issue URL

https://github.com/mozilla/standards-positions/issues/1010

WebKit Bugzilla URL

No response

Radar URL

No response

Description

Currently it's impossible to use ES module imports in environments that require subresource integrity for security or privacy reasons. This is a relatively small addition to the platform that would enable it.

annevk commented 1 month ago

Colleagues and I find it a good idea to expand the set of resources you can supply integrity metadata for. As such I suggest we resolve this as "position: support" one week from now.