Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Does using SRI (https://developer.mozilla.org/en-US/docs/Web/Security/Subres...) defeat a portion of this attack?


A small portion. (It’s listed in the mitigations.) Use HTTPS anyway, though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: