News for hackers. Stuff that matters.

A comment on Protecting sites from Cryptojacking with CSP and SRI.

Re:Protecting sites from Cryptojacking with CSP and SRI by jnordwick on Sunday February 11, 2018 @01:13PM (#16353867)
When will the JavaScript community learn to stop trusting 3rd party code downloaded over the internet?

In the previous event the code disappeared. This time it isn't what you wanted.

[ Parent | on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI by userbinator on Sunday February 11, 2018 @01:21PM (#16353920)
When will the JavaScript community learn to stop trusting 3rd party code downloaded over the internet?

Given that the majority in the JS community probably have it enabled by default in their browsers, probably never...

[ Parent | on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI by floatboth on Sunday February 11, 2018 @02:01PM (#16354149)
Not 3rd party in relation to the user's machine.

3rd party in relation to the site. As in <script src="https://someone.elses.domain/something.js">

[ Parent | on HN ]