[wp-trac] [WordPress Trac] #33948: Implement subresource integrity (SRI)

WordPress Trac noreply at wordpress.org
Thu Oct 1 20:15:02 UTC 2015


#33948: Implement subresource integrity (SRI)
--------------------------------------+------------------------------
 Reporter:  johnbillion               |       Owner:
     Type:  enhancement               |      Status:  new
 Priority:  normal                    |   Milestone:  Awaiting Review
Component:  Script Loader             |     Version:
 Severity:  normal                    |  Resolution:
 Keywords:  needs-patch dev-feedback  |     Focuses:
--------------------------------------+------------------------------

Comment (by johnbillion):

 @dbarlett Yep that could work. To prevent parameter overload in the
 `wp_enqueue_*()` functions it would probably have to end up being some
 sort of `$arguments` or `$attributes` parameter.

 Another concern I thought of regarding core implement SRI on core assets:
 A plugin might be overriding assets with a CDN which might not return
 exactly the same file as core, and then SRI would block the asset from
 loading. This might actually be a blocker.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33948#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list