![]() Obviously reviewing incoming code and processing it appropriately is the only way to ensure what a given project then generates hashes for is what then follows as having a certain expectation of integrity. Please note, SRI doesn't address the sources (whether a URL, CDN, npm, etc) prior to implementing this answer's solution, including transformations which occur along the way, whether within or between a project and delivery (eg via a CDN). This basically ensures, if it works properly, everything the project has is generally trusted and can be redistributed and supported (with my own CSP headers and everything served from limited/restricted environments). bundle.jsĭeps.js simply has a list of valid es module import/export statements as with any es module and can be used directly (eg in development) instead of the bundle Deno also supports import maps which would allow local paths, bare imports and remapping various patterns (see the docs) I expect to actually both manually review version controlled content and possibly have other testing against the bundle to ensure it's looks/works right. In my project: DENO_DIR=./cache deno cache -lock=lock.json -lock-write. Later processing the external bundle as desired to fit any given use-case (minify, etc). Reviewing the source from this as indicated and process with testing which ensures the bundle is generally what's expected. I consume external dependencies from any given specific URL (unpkg, cdn, github, etc) and use Deno to cache the content from those urls, generate a lock file with the hashes, then from that ensure the cache and lock file are used to generate a bundle, failing to generate the bundle when invalid. You can use hybrids in all evergreen browsers and IE11 including a list of required polyfills and shims.I'm working through a practical solution and this is what I have so far. The library requires some of the ES2015 APIs and Shadow DOM, Custom Elements, and Template specifications. - switching tabs using children factory.- todo list using parent factory for state management. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |