Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This isn't a 100% solution but you can pin external JavaScript includes in HTML using subresource integrity (https://developer.mozilla.org/en-US/docs/Web/Security/Subres...).

This doesn't help if someone can mess with the HTML though.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: