Skip to content

Commit

Permalink
Disallow the integrity attribute for inline scripts
Browse files Browse the repository at this point in the history
Fallout from whatwg#1984.
  • Loading branch information
zcorpan authored and Alice Boxhall committed Jan 7, 2019
1 parent 97e60e8 commit 8410517
Showing 1 changed file with 6 additions and 5 deletions.
11 changes: 6 additions & 5 deletions source
Original file line number Diff line number Diff line change
Expand Up @@ -57556,11 +57556,12 @@ interface <dfn>HTMLScriptElement</dfn> : <span>HTMLElement</span> {
the script specified by an element will be executed. The value is text. <ref spec="CSP"></p>

<p>The <dfn data-export="" data-dfn-for="script" data-dfn-type="element-attr"><code
data-x="attr-script-integrity">integrity</code></dfn> attribute represents the
<span data-x="concept-request-integrity-metadata">integrity metadata</span> for requests which
this element is responsible for. The value is text. The <code
data-x="attr-script-integrity">integrity</code> attribute must not be specified when
embedding a <span data-x="module script">module script</span>. <ref spec="SRI"></p>
data-x="attr-script-integrity">integrity</code></dfn> attribute represents the <span
data-x="concept-request-integrity-metadata">integrity metadata</span> for requests which this
element is responsible for. The value is text. The <code
data-x="attr-script-integrity">integrity</code> attribute must not be specified when embedding a
<span>module script</span> or when the <code data-x="attr-script-src">src</code> attribute is not
specified. <ref spec="SRI"></p>


<p>Changing the <code data-x="attr-script-src">src</code>, <code
Expand Down

1 comment on commit 8410517

@alice
Copy link
Owner

@alice alice commented on 8410517 Feb 19, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@JHabdas You might want whatwg@7a40584

Please sign in to comment.