News for hackers. Stuff that matters.

A comment on Python 3.11 in the Web Browser. Parent comment

Re:Python 3.11 in the Web Browser by doctoboggan on Saturday March 26, 2022 @07:21PM (#30816244)
It seems like there could be some sort of cross origin cache header that could be set? That way by default you couldn't store in a global cache but server operators would be able to mark certain resources that could be.
[ Parent | on HN ]
Re:Python 3.11 in the Web Browser by modeless on Saturday March 26, 2022 @07:32PM (#30816300)
Server operators would just set that header on everything. There's no downside for them. The privacy issue only impacts users and it would still exist even if only a subset of libraries were shared.
[ Parent | on HN ]
Re:Python 3.11 in the Web Browser by zdw on Saturday March 26, 2022 @11:50PM (#30817546)
One proposed solution is checksums on CDN provided javascript:

https://w3c.github.io/webappsec-subresource-integrity/

[ Parent | on HN ]