JS Supply Chain Attacks | ww.wp.xz.cn

michel.b
(@michelb-1)

8 years, 3 months ago

Does WordPress use ‘integrity’ attributes for the scripts to protect us from JS Supply Chain Attacks?
Thank you.

Viewing 1 replies (of 1 total)

Moderator Jan Dembowski
(@jdembowski)

Forum Moderator and Brute Squad

8 years, 3 months ago

I’m pretty sure that WordPress does not but it looks like you can add that via a plugin.

https://github.com/meitar/wp-sri

It’s something that has been discussed in these trac tickets.

https://core.trac.ww.wp.xz.cn/ticket/22249
https://core.trac.ww.wp.xz.cn/ticket/33948

Viewing 1 replies (of 1 total)

The topic ‘JS Supply Chain Attacks’ is closed to new replies.

Tags

JS script

In: Fixing WordPress
1 reply
2 participants
Last reply from: Jan Dembowski
Last activity: 8 years, 3 months ago
Status: not resolved

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics