News for hackers. Stuff that matters.
Re:Protecting sites from Cryptojacking with CSP and SRI by jschwartzi on Sunday February 11, 2018 @05:12PM (#16355125)
How would I get Mozilla to warn me when a script is loaded without Subresource Integrity? I'd like to avoid being caught unawares by this type of security hole, especially if it lets third parties execute code in my browser without any controls.
Re:Protecting sites from Cryptojacking with CSP and SRI by hyperpape on Sunday February 11, 2018 @09:33PM (#16356130)
I think adoption is limited enough that you just need to run NoScript, uBlock or something and whitelist JS.