Page MenuHomeDevCentral

Define Access-Control-Allow-Origin for CSS for assets.
ClosedPublic

Authored by dereckson on May 26 2023, 01:22.
Tags
None
Referenced Files
F10748262: D3136.diff
Fri, Jul 25, 19:21
F10722283: D3136.id8000.diff
Fri, Jul 25, 02:00
Unknown Object (File)
Thu, Jul 24, 09:36
Unknown Object (File)
Thu, Jul 10, 18:02
Unknown Object (File)
Tue, Jul 8, 10:01
Unknown Object (File)
Sun, Jul 6, 11:12
Unknown Object (File)
Sun, Jul 6, 11:07
Unknown Object (File)
Thu, Jul 3, 02:04
Subscribers
None

Details

Summary

To be sure the assets site serves the expected file, we can use the SRI,
Subresource Integrity mechanism to store a hash in the <link> tag.

If the URL does not support Cross-Origin Resource Sharing (CORS),
the SRI mechanism can't work. We so allow access from all origins.

Reference: https://www.w3.org/TR/SRI/

Ref T1881

Test Plan

Tested with D3119 to load D3135 CSS

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable