You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Added pinned C++ browser toolchain integrity manifests so consumers can host large YOWASP assets on a remote HTTPS origin while requiring exact SHA-256 digests before execution.
Fixed
Replaced the C++ browser worker same-origin-only assumption with a stricter trust model: same-origin assets remain allowed, while cross-origin compiler bundles and WASM/sysroot assets must match an exact manifest entry.
Loaded pinned remote C++ compiler bundles through verified Blob modules and rewrote their import.meta.url base so secondary YOWASP fetches are also checked against the same manifest.