-
Notifications
You must be signed in to change notification settings - Fork 104
Open
Labels
Description
Describe the bug
Hi.
We have hardened infrastructure, and the internet is blocked except few sites. Site https://developer.microsoft.com/en-us/graph/graph-explorer is allowed, but doesn't show any output.
I found out, that there is blocked this JS https://cdn.jsdelivr.net/npm/[email protected]/min/vs/loader.js. Our security architect doesn't wont allow it and ask for using https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity. Are you able to add hashes of js files?
Example:
<script src="https://cdn.jsdelivr.net/npm/[email protected]/min/vs/loader.js" integrity="sha384-pHG02SG8pId94Np3AbPmBEJ1yPqaH0IkJGLSNGXYmuGhkazT8Lr/57WYpbkGjJtu" crossorigin="anonymous"></script>
To Reproduce
Steps to reproduce the behavior:
- Block access to url cdn.jsdelivr.net
- Open Graph API Explorer.
- Run any request.
- See only "Loading".