80 questions
0
votes
0
answers
66
views
Angular 18 subresource integrity using an incorrect hash
I am working to upgrade an old code base from Angular 9 to Angular 18 for work. Subresource integrity was added while still on v8 and was working fine, however now that the code can compile and run in ...
0
votes
0
answers
49
views
Angular v9 subresource-integrity flag not adding integrity
I am working on an Angular 9 application and attempting to use the subresource integrity flag when building with ng build but I am not seeing any integrity properties added in the generated index.html ...
0
votes
0
answers
91
views
Capture SRI check failed error using jQuery
I have added SRI hashes to many scripts on my page. I want to trigger a function any time SRI check fails using an event listener. I tried using window onerror function but SRI failure is not ...
2
votes
1
answer
235
views
Override Subresource Integrity algorithm for Angular builds
I am using Angular v17 and configuration allows for setting subresourceIntegrity to true which will add the integrity hash to the <script> tags that import the compiled Angular project.
This is ...
1
vote
1
answer
172
views
Missing SRI hash version in python environment
I'm trying to use Panel for the first time in Jupyter Notebook. I've pip installed it and trying to just run in my python environment:
import panel as pn
however I get this error: ValueError: Missing ...
0
votes
1
answer
2k
views
Is there a way to implement Subresource Integrity Check for Next.js? Either Next 12, 13, or 14?
Enabling experimental sri module.
experimental: {
sri: {
algorithm: 'sha256'
}
},
It generates the subresource integrity manifest files, but doesn't inject the integrity attribute ...
3
votes
0
answers
517
views
Why Does Subresource Integrity require CORS?
I don't understand why my browser allows this:
<script src="https://www.google.com/recaptcha/api.js"></script>
but not this:
<script src="https://www.google.com/...
0
votes
1
answer
1k
views
How to generate automatically SRI Hash in .net framework 4.7.2
In Security Scan, The third-party links/scripts don't have integrity attribute for the browser, so i want to generate SRI Hash in automatically for security purpose.
I need to Generate SRI Hash ...
0
votes
1
answer
609
views
how to bypass subresources integrity check by autoresponder and fiddler rules
I want to use fiddler to changed the javascript files
I've solve the cors policy, but I don't know how to set the rules to allow my script bypass the subresources integrity checks, what should I write ...
1
vote
1
answer
1k
views
is nextjs 12 and 13 version supports the subresource integrity for CDN javascripts?
We have Next JS 12 version in our application, I have searched about SRI implementation for Next JS 12 version,then found this offical Next JS GitHub discussion link. I have tried with SRI ...
0
votes
0
answers
2k
views
Subresource Integrity : script not blocked when integrity attribute is malformed
I am currently exploring the Subresource Integrity security feature and I found out an implementation that disturbs me a bit.
Basically, when you specify in a script that you want to check the ...
1
vote
0
answers
268
views
Sub-resource integrity breaks CSS
I have a very simple web page with some tables, with a very simple CSS file. When trying to add SRI, the CSS completely stops loading, despite the hash being provided. Here is the CSS :
table,
td,
th {...
2
votes
0
answers
746
views
Google Recaptcha Subresource integrity
I wanted to ask if it's possible to create SRI for Google Recaptcha.
In a project, we are verifying user using filter (inheritates from IActionFilter, IMvcFilter) which calls https://www.google.com/...
3
votes
0
answers
4k
views
google reCaptcha integrity-check and CORS
I've successfully integrated google reCaptcha into my website.
<script src="https://www.google.com/recaptcha/api.js"></script>
It works OK. Now I', trying to make it more ...
-1
votes
1
answer
605
views
webpack-intergrity-subresource don't make any effect [closed]
I'm trying to apply the plugin to my nuxtjs's webpack to enable subresource integrity. Here is my nuxt.config.js
extend(config) {
config.output!.crossOriginLoading = "anonymous";
}...