Merge pull request #3652 from gobind-singh/regex_update_missing-integrity

html.security.audit.missing-integrity.missing-integrity - Ordering regex update

Author: LewisArdern

html/security/audit/missing-integrity.html

@@ -35,6 +35,8 @@
     <!-- ok: missing-integrity -->
     <link rel="stylesheet" href="https://someurl/style.css" integrity="sha256-somehashdigest">
     <!-- ok: missing-integrity -->
+    <link rel="stylesheet" integrity="sha256-somehashdigest href="https://someurl/style.css">
+    <!-- ok: missing-integrity -->
     <link rel="stylesheet" href="./css/mystyle.css">
 	<!-- ok: missing-integrity -->
 	<link rel="preconnect" href="https://fonts.gstatic.com/" />

html/security/audit/missing-integrity.yaml

@@ -31,7 +31,7 @@ rules:
           - pattern: src="//..."
           - pattern: href='//...'
           - pattern: href="//..."
-        - pattern-not-regex: (?is).*integrity=
+        - pattern-not-regex: (?is).*integrity=.*
         - pattern-not-regex: (google-analytics\.com|fonts\.googleapis\.com|fonts\.gstatic\.com|googletagmanager\.com)
         - pattern-not-regex: .*rel\s*=\s*['"]?preconnect.*
   paths: