search

django-compressor / django-compressor

Compresses linked and inline javascript or CSS into a single cached file.
https://django-compressor.readthedocs.io
Other
2.78k stars 598 forks source link

SRI feature request #661

Open Merenon opened 8 years ago

Merenon commented 8 years ago

To add another security layer to websites it would be awesome to implement Subresource Integrity (SRI) support.

Even if it's still a W3C draft and experimental, Github already implemented it: http://githubengineering.com/subresource-integrity/

http://www.w3.org/TR/SRI/

diox commented 8 years ago

This is a good idea, yeah. I'd happily review a pull request implementing this :)

danielsamuels commented 8 years ago

+1

seanbell commented 8 years ago

:+1:

skorokithakis commented 8 years ago

I would also like this feature.

karyon commented 6 years ago

check out https://github.com/mozilla/mozillians/pull/1460/files for an implementation. should be pretty easy to pull into a project, no modification of django-compressor seems to be necessary.

for integrating this into django-compressor, an option instead of that mixin would be preferable. still, it should be pretty easy to implement. pull requests are welcome :)

shiveringbulbul commented 4 years ago

So, this function will never be pulled request to the new version in the future?

ldng commented 4 years ago

This is more relevant than ever to modern web so I'd rather have it native then to have to "to pull into a project". It should even be the default nowadays, IMHO.

Edit: is it me or the Mozillians is not compatible anymore ? Edit2: FYI, COMPRESS_CSS_COMPRESSOR and COMPRESS_JS_COMPRESSOR have been replace by the COMPRESSORS dict that follows the same logic as the COMPRESS_FILTERS dict.

jsolly commented 2 years ago

I would use django-compressor immediately if it had native SRI support. Has anyone found a way to get this to work with integrity hashes?

aldenjenkins commented 4 months ago

I would also like this feature