rspec/rules/S5725/description.adoc
2020-06-30 17:16:12 +02:00

2 lines
393 B
Plaintext

Fetching external resources, for example from a CDN, without verifying their integrity could impact the security of an application if the CDN gets compromised and resources are replaced by malicious ones. Resources integrity feature will block resources inclusion into an application if the pre-computed digest of the expected resource doesn't match with the digest of the retrieved resource.