Update hint-sri to work with connector-local and validate external resources [3]
#1632
Comments
sarvaje
added a commit
to sarvaje/hint
that referenced
this issue
Feb 4, 2019
sarvaje
added a commit
to sarvaje/hint
that referenced
this issue
Feb 4, 2019
sarvaje
added a commit
to sarvaje/hint
that referenced
this issue
Feb 4, 2019
4 tasks
sarvaje
changed the title
hint-sri to work with connector-local and validate external resourceshint-sri to work with connector-local and validate external resources [2]
molant
pushed a commit
that referenced
this issue
Feb 7, 2019
sarvaje
changed the title
hint-sri to work with connector-local and validate external resources [2]hint-sri to work with connector-local and validate external resources [3]
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently this hint relies on external resources being fetched, but
connector-localintentionally doesn't fetch external resources as it works with static files.I propose we update this hint to fetch external resources (e.g. from a CDN) itself when running locally. Local files would be difficult to validate as they're potentially changing frequently... perhaps we could do something special for items coming from
package.jsondependencies. This should likely also include some caching to avoid an abundance requests to external resources from repeated runs during development.The text was updated successfully, but these errors were encountered: