Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SubResourceIntegrity check failed for <link> tag #91

Closed
manoj6587 opened this issue Feb 12, 2020 · 1 comment
Closed

SubResourceIntegrity check failed for <link> tag #91

manoj6587 opened this issue Feb 12, 2020 · 1 comment

Comments

@manoj6587
Copy link

I was loading two tag under html page. While loading these two tags, I was purposefully provided incorrect hash value under integrity attribute.

  1. Loading tag under part,
  1. Loading tag under part,

Below is my style.css file content for reference purpose:-
`body {
background-color: lightblue;
}

h1 {
color: navy;
margin-left: 20px;
}

p {
color: red;
margin-left: 15px;
}`

Hash integrity of style.css file:-

[root@cent6]# shasum -b -a 384 style.css | awk '{ print $1 }' | xxd -r -p | base64 9IW3YJhL7glmsRX7VoQiAEriVPg6SgCHoyRv7gJX0LY5gWNlLxIqVu0umlgSxCaH

Additional info:-
My html page and style sheet file is loading over https.
Header Set- Access-Control-Allow-Origin: *

In both cases browser (chrome Version 79.0.3945.130) failed to check integrity value for resource and style sheet loaded by browser.

@dveditz
Copy link
Member

dveditz commented Feb 19, 2020

This is a tracker for issues with the spec, not with any specific implementation. As written this issue should be filed in the Chromium bug tracker. They'll want a complete testcase: both the HTML and CSS files as attachments, not just text in the description (every byte matters in hashes!).

@dveditz dveditz closed this as completed Feb 19, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants