Re: SRI: data URIs and Blob URL

Thank you, I got it.

It seems that Chrome's implementation followed the SRI spec.

On Thu, Sep 24, 2015 at 12:19 AM, Anne van Kesteren <annevk@annevk.nl>
wrote:

> On Wed, Sep 23, 2015 at 5:50 PM, Jerry Qu <quguangyu@gmail.com> wrote:
> > May the SRI spec give some specific recommendations for this?
>
> Only the blob URL should work per Fetch, to which SRI defers. (That is
> because data URLs for <script> get tainted and SRI cannot poke into
> tainted responses.)
>
>
> --
> https://annevankesteren.nl/
>



-- 
非常感谢~

屈光宇（ImQuQu.com）