News for hackers. Stuff that matters.

A comment on Protecting sites from Cryptojacking with CSP and SRI. Parent comment

Re:Protecting sites from Cryptojacking with CSP and SRI by JetSpiegel on Sunday February 11, 2018 @05:16PM (#16355139)
We are clearly in the Antivirus level of protection (blacklists) to maintain backwards compatibility, instead of a whitelist of allowed domains or features to use.
[ Parent | on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI by ubernostrum on Wednesday February 14, 2018 @12:38PM (#16377556)
CSP is a whitelist-based approach; CSS/JS/etc. will only be permitted from the sources listed in the CSP header.
[ Parent | on HN ]