Importmap integrity section

[yoavweiss]

Description

SRI support for ES module imports would enable using them in documents that require SRI for certain scripts for security or privacy reasons.

See problem statement and proposal by @guybedford.

This PR adds a description of the added section, to help developers make use of it.

whatwg/html#10269
Chromium CL + tests
WebKit PR

Motivation

Document the newly added integrity section in import maps.

Additional details

Related issues and pull requests

Fixes mdn/mdn#541

[github-actions]

Preview URLs

• /en-US/docs/Web/HTML/Element/script/type/importmap

(comment last updated: 2024-05-22 13:37:34)

[chrisdavidmills]

Thanks @yoavweiss, this looks great. I just had a few language suggestions for you to look over, but nothing major.

Question — have you submitted a corresponding https://github.com/mdn/browser-compat-data PR for this? It would be good to list it as a subfeature in the compat table.

[yoavweiss]

Question — have you submitted a corresponding https://github.com/mdn/browser-compat-data PR for this? It would be good to list it as a subfeature in the compat table.

I put together an initial PR, but it seems like it needs:

• The HTML PR to land
• Definitive version for WebKit support, which I'm not sure how to get for a PR that just landed.

[chrisdavidmills]

Great, nice work @yoavweiss. I did a couple of further small language fixes, and now I think its GTG.

I'll leave it unmerged until we've got the compat data sorted out.

[yoavweiss]

I'll leave it unmerged until we've got the compat data sorted out.

Sounds good, thanks! :)

[yoavweiss]

Compat data is good to go (I think) at mdn/browser-compat-data#23153

[chrisdavidmills]

Compat data is good to go (I think) at mdn/browser-compat-data#23153

Great; I've merged the BCD. Now we just need to wait until the BCD update is slurped into MDN, which usually only takes a day, I think. OR, we could just merge this now, if you don't mind a small risk that it might show without any BCD or spec table for a very short while.

[yoavweiss]

Great; I've merged the BCD. Now we just need to wait until the BCD update is slurped into MDN, which usually only takes a day, I think. OR, we could just merge this now, if you don't mind a small risk that it might show without any BCD or spec table for a very short while.

No strong opinion, so I'll leave the decision up to you! :)

[chrisdavidmills]

Great; I've merged the BCD. Now we just need to wait until the BCD update is slurped into MDN, which usually only takes a day, I think. OR, we could just merge this now, if you don't mind a small risk that it might show without any BCD or spec table for a very short while.

No strong opinion, so I'll leave the decision up to you! :)

Let's dooooooooo it ;-)