Page MenuHomeDevCentral

Define Access-Control-Allow-Origin for CSS for assets.
ClosedPublic

Authored by dereckson on May 26 2023, 01:22.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jul 3, 02:04
Unknown Object (File)
Thu, Jul 3, 02:03
Unknown Object (File)
Mon, Jun 30, 22:10
Unknown Object (File)
Sun, Jun 29, 08:46
Unknown Object (File)
Sun, Jun 29, 03:49
Unknown Object (File)
Sat, Jun 28, 07:22
Unknown Object (File)
Thu, Jun 26, 13:24
Unknown Object (File)
Mon, Jun 23, 13:07
Subscribers
None

Details

Summary

To be sure the assets site serves the expected file, we can use the SRI,
Subresource Integrity mechanism to store a hash in the <link> tag.

If the URL does not support Cross-Origin Resource Sharing (CORS),
the SRI mechanism can't work. We so allow access from all origins.

Reference: https://www.w3.org/TR/SRI/

Ref T1881

Test Plan

Tested with D3119 to load D3135 CSS

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable