Hacker News new | past | comments | ask | show | jobs | submit login

> However I am a little concerned with adding a script from another website... it requires a lot of trust, doesn'it?

Not if you use the `integrity` attribute like the page recommends. If the file hash doesn't match the one given in the tag, the browser won't run the script.

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...




Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact

Search: