Or just use subresource integrity | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		echoangle on June 26, 2024 \| parent \| context \| favorite \| on: Polyfill supply chain attack hits 100K+ sites Or just use subresource integrity

stevenpetryk on June 26, 2024 [–]

Subresource integrity wouldn't work with Polyfill.io scripts, since they dynamically changed based on user agent.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact