Page MenuHomeDevCentral

Define Access-Control-Allow-Origin for CSS for assets.
ClosedPublic

Authored by dereckson on May 26 2023, 01:22.
Tags
None
Referenced Files
F10311646: D3136.id8000.diff
Sat, Jun 28, 07:22
Unknown Object (File)
Thu, Jun 26, 13:24
Unknown Object (File)
Mon, Jun 23, 13:07
Unknown Object (File)
Sat, Jun 21, 10:09
Unknown Object (File)
Mon, Jun 16, 20:58
Unknown Object (File)
Mon, Jun 16, 18:13
Unknown Object (File)
Mon, Jun 16, 10:23
Unknown Object (File)
Mon, Jun 16, 07:51
Subscribers
None

Details

Summary

To be sure the assets site serves the expected file, we can use the SRI,
Subresource Integrity mechanism to store a hash in the <link> tag.

If the URL does not support Cross-Origin Resource Sharing (CORS),
the SRI mechanism can't work. We so allow access from all origins.

Reference: https://www.w3.org/TR/SRI/

Ref T1881

Test Plan

Tested with D3119 to load D3135 CSS

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable