Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

integrity issue using firefox #11151

Closed
mquillot opened this issue Apr 9, 2018 · 3 comments
Closed

integrity issue using firefox #11151

mquillot opened this issue Apr 9, 2018 · 3 comments
Assignees
@DanielRuf
Labels
📖 documentation

Comments

@mquillot
Copy link

mquillot commented Apr 9, 2018

Hi !

I've encountered an issue when i tried to use CDN link on my simple local Web page.

Here is the beginning of my code:

<!doctype html>
<html class="no-js" lang="fr">
    <head>
        <meta charset="UTF-8"/>
        <meta http-equiv="x-ua-compatible" content="ie=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
        
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/foundation/6.4.3/css/foundation.min.css" integrity="sha256-itWEYdFWzZPBG78bJOOiQIn06QCgN/F0wMDcC4nOhxY=" crossorigin="anonymous" />

Using this code, the Web page didn't displayed well. I tried to know "why" and then i found an answer: removing integrity attribute on the link node makes the page displaying well.
Here is my computer configuration:

  • Firefox 59.0.2
  • Ubuntu Mate 16.04
  • (i don't think you really need more information; but you can ask me if you want)

I don't know if it's a known feature/issue, so i preferred create a issue, hopping i'm not bothering you.
Best regards.
@DanielRuf
Copy link
Contributor

DanielRuf commented Apr 9, 2018 •
edited
Loading

Hi, please check if Firefox developer tools shows another hash in the console.

It should be
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/foundation/6.4.3/css/foundation.min.css" integrity="sha256-GSio8qamaXapM8Fq9JYdGNTvk/dgs+cMLgPeevOYEx0= sha384-wAweiGTn38CY2DSwAaEffed6iMeflc0FMiuptanbN4J+ib+342gKGpvYRWubPd/+ sha512-QHEb6jOC8SaGTmYmGU19u2FhIfeG+t/hSacIWPpDzOp5yygnthL3JwnilM7LM1dOAbJv62R+/FICfsrKUqv4Gg==" crossorigin="anonymous">

sha256-itWEYdFWzZPBG78bJOOiQIn06QCgN/F0wMDcC4nOhxY= is wrong.

The docs are not uptodate, the changes from the master branch are not yet deployed.

See #11005

Let me know if we can close the issue then.

@DanielRuf DanielRuf self-assigned this Apr 9, 2018
@mquillot
Copy link
Author

mquillot commented Apr 9, 2018

It works ! :) Thank you for your reactivity. I think you can close the issue.

@DanielRuf
Copy link
Contributor

For future usage: I've used https://report-uri.com/home/sri_hash by Scott Helme

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DanielRuf DanielRuf

Labels
📖 documentation
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@DanielRuf @mquillot