34 lines
816 B
Plaintext
34 lines
816 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
let script = document.createElement("script"); // Sensitive
|
|
script.src = "https://cdnexample.com/script-latest.js";
|
|
script.crossOrigin = "anonymous";
|
|
document.head.appendChild(script);
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
----
|
|
let script = document.createElement("script");
|
|
script.src = "https://cdnexample.com/script-v1.2.3.js";
|
|
script.integrity = "sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC"; // Compliant
|
|
script.crossOrigin = "anonymous";
|
|
document.head.appendChild(script);
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::../comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|