Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[BUG] HTML - format documment "fracture" Subresource Integrity (3rd part libs)

See original GitHub issue

Orriginal issues:

https://github.com/Microsoft/vscode/issues/38077

Ideal expected result is second because If I use “Indent using Tabs” as tabs (not 4 spaces),…

Now it will do some problems, and Subresource integrity is “fractured”…

        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va
+PmSTsz/K68vbdEjh4u"
	 crossorigin="anonymous">
        <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"
	 crossorigin="anonymous"></script>

integrity=“sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va ↵ +PmSTsz/K68vbdEjh4u”

Issue Analytics

State:
Created 6 years ago
Comments:5 (3 by maintainers)

Top GitHub Comments

2reactions

ghostcommented, Dec 2, 2017

force-aligned is not solution, because it force all tags with all attributes… I need force only attributes with long value as integrity key… maybe new settings "wrap"-aligned

0reactions

bitwisemancommented, Aug 12, 2018

@Mlocik97-issues
aligned-multiple? See 1.8.0-rc4.

Top Results From Across the Web

Do not let your CDN betray you: Use Subresource Integrity

The idea is to include the script along with its cryptographic hash (e.g. SHA-384) when creating the web page. The browser can then...

Do not let your CDN betray you: use subresource integrity ...

It's very important in the storage of hashed passwords, but not in checking the integrity of files, which is the use case here....

About ty_gavin - Tealium Learning Center

I know what you're thinking: browsers have a built-in security feature to validate third-party JavaScript files and you use Tealium iQ Tag ...

Intent to Implement: Subresource Integrity (SRI).

In a nutshell, metadata inlined into HTML elements allows the browser to determine whether the resource that was downloaded matches the resource the...

Third party CSS is not safe - JakeArchibald.com

They may betray that trust by deleting the resource, giving me a 404, making my site look broken. Or, they might replace the...