Page MenuHomeDevCentral

Define Access-Control-Allow-Origin for CSS for assets.
ClosedPublic

Authored by dereckson on May 26 2023, 01:22.
Tags
None
Referenced Files
F12207797: D3136.id8000.diff
Tue, Oct 7, 00:21
Unknown Object (File)
Sun, Oct 5, 15:15
Unknown Object (File)
Sun, Oct 5, 02:51
Unknown Object (File)
Sat, Oct 4, 08:46
Unknown Object (File)
Sat, Oct 4, 08:46
Unknown Object (File)
Wed, Oct 1, 16:52
Unknown Object (File)
Wed, Oct 1, 15:38
Unknown Object (File)
Wed, Oct 1, 09:11
Subscribers
None

Details

Summary

To be sure the assets site serves the expected file, we can use the SRI,
Subresource Integrity mechanism to store a hash in the <link> tag.

If the URL does not support Cross-Origin Resource Sharing (CORS),
the SRI mechanism can't work. We so allow access from all origins.

Reference: https://www.w3.org/TR/SRI/

Ref T1881

Test Plan

Tested with D3119 to load D3135 CSS

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable