Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

YOUR WEBSITE HAS ASSETS – YOU NEED SRI- 33

Lukas VileikisPosted 6 Years Ago
  • Loading external scripts for other websites is quite common. So, what if one of these scripts is compromised?
  • You are essentially screwed! So, this article is suggesting to adding Subresource Integrity (SRI) checks by validating against a hash.
  • This can be done manually, in the code, or by using the Content-Security Policy (CSP). Overall, a great measure for defense-in-depth!