Fucory pfp
Fucory
@fucory
Did a PR to gnosis safe UI to add missing SRI protection https://github.com/safe-global/safe-wallet-monorepo/pull/5186/files For those not in loop SRI tells the browser to not load javascript files that don't match an integrity hash https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity All bundlers support this with plugins
2 replies
1 recast
17 reactions

Fucory pfp
Fucory
@fucory
I'll be committing these sri hashes onchain
1 reply
0 recast
6 reactions

polymutex pfp
polymutex
@polymutex.eth
Still seems not super useful so long as the top-level page itself isn't integrity-verifiable... Especially if all these bundles are served from the same server.
2 replies
0 recast
1 reaction