A followup to #35. I think SRI should be enabled by default in production for all apps. And developers can remove it. But I think having best practices out of the box is very important. There is really no downside to it.
I do not know why is this something which is possible currently to enable during development at all. I think this is reasonable just during production (when bundle is made, or run --production is used). During development it looks anyway that there are issues (https://github.com/meteor/meteor/issues/10710).
mitar
commented
4 years ago
A followup to #35. I think SRI should be enabled by default in production for all apps. And developers can remove it. But I think having best practices out of the box is very important. There is really no downside to it.
I do not know why is this something which is possible currently to enable during development at all. I think this is reasonable just during production (when bundle is made, or
run --productionis used). During development it looks anyway that there are issues (https://github.com/meteor/meteor/issues/10710).