For JS static files, implement unique naming and subresource integrity.

buro9 / microcosm

Front end for Microcosm, a Go web server that serves the static files, templates and performs API calls.

GNU Affero General Public License v3.0

11 stars 3 forks source link

For JS static files, implement unique naming and subresource integrity. #129

Open buro9 opened 1 year ago

buro9 commented 1 year ago

Specifically... files should appear within the embedded file system to be named by their chosen SHA hash and that JS includes within the templates enforced the integrity.

See: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity