The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

6 点作者 oferzelig超过 7 年前

1 comment

Corrado超过 7 年前

It looks like this is being exploited in the wild [0].<p>[0] <a href="https://twitter.com/mszustak/status/963322531729018880" rel="nofollow">https://twitter.com/mszustak/status/963322531729018880</a>