W3C home > Mailing lists > Public > public-webappsec@w3.org > October 2015

Re: [SRI] Call for Consensus: Subresource Integrity to Candidate Recommenation

From: Anne van Kesteren <annevk@annevk.nl>
Date: Wed, 7 Oct 2015 07:23:07 +0200
Message-ID: <CADnb78ju=FPMjMWoEMKqdc8otriERc6nzMnNqCyXQ-MQcmg-LA@mail.gmail.com>
To: Francois Marier <francois@mozilla.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
On Tue, Oct 6, 2015 at 11:08 PM, Francois Marier <francois@mozilla.com> wrote:
> I see two:

I also remember giving you feedback on
https://w3c.github.io/webappsec-subresource-integrity/#is-response-eligible-for-integrity-validation.
That it should just be a simple check on response's type and nothing
else. Cannot locate that though. And deferring upstreaming of the
attribute definitions does not seem great. That's where you'll get the
real review on their definitions.


-- 
https://annevankesteren.nl/
Received on Wednesday, 7 October 2015 05:23:35 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:15 UTC