Page MenuHomeDevCentral

Define Access-Control-Allow-Origin for CSS for assets.
ClosedPublic

Authored by dereckson on May 26 2023, 01:22.
Tags
None
Referenced Files
F7139622: D3136.diff
Mon, Apr 21, 08:42
F7136310: D3136.id7999.diff
Mon, Apr 21, 07:07
F7089528: D3136.id8000.diff
Sun, Apr 20, 13:19
Unknown Object (File)
Sat, Apr 19, 15:17
Unknown Object (File)
Thu, Apr 17, 18:52
Unknown Object (File)
Thu, Apr 17, 15:23
Unknown Object (File)
Thu, Apr 17, 06:33
Unknown Object (File)
Wed, Apr 16, 21:11
Subscribers
None

Details

Summary

To be sure the assets site serves the expected file, we can use the SRI,
Subresource Integrity mechanism to store a hash in the <link> tag.

If the URL does not support Cross-Origin Resource Sharing (CORS),
the SRI mechanism can't work. We so allow access from all origins.

Reference: https://www.w3.org/TR/SRI/

Ref T1881

Test Plan

Tested with D3119 to load D3135 CSS

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable