The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

6 pointsby oferzeligover 7 years ago

1 comment

Corradoover 7 years ago

It looks like this is being exploited in the wild [0].<p>[0] <a href="https://twitter.com/mszustak/status/963322531729018880" rel="nofollow">https://twitter.com/mszustak/status/963322531729018880</a>