Re:Polyfill supply chain attack hits 100K+ sites
by modeless on Tuesday June 25, 2024 @04:49PM
(#40793415)
Another downside of SRI is that it defeats streaming. The browser can't verify the checksum until the whole resource is downloaded so you don't get progressive decoding of images or streaming parsing of JS or HTML.
[ Parent
| on HN ]
There are no comments on this comment yet.