News for hackers. Stuff that matters.
Re:Major sites running unauthenticated JavaScript on their p... by fredley on Thursday November 29, 2018 @08:24AM (#18559974)
This would be really neat, and not that hard to build from what I know about building extensions. Basically just store a hash of file, whenever external files are loaded see if their hash exists in your list, if not block it from loading until it's been reviewed.

As an extra (paid-for?) feature hook into an online system that keeps track of hashes of known-good popular libs, and can mark as untrusted when a vulnerability is found with a version of e.g. jQuery and auto-flag that for users.

There are no comments on this comment yet.