Skip to content

Commit 67b7cab

Browse files
author
Francois Marier
committed
SRI: link to integrity metadata in the Fetch spec
While we have our own "integrity metadata" section that expands on the format of the metadata, we should also reference the Fetch spec on that topic. #428 (comment)
1 parent 05b4893 commit 67b7cab

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

specs/subresourceintegrity/spec.markdown

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -191,7 +191,8 @@ used to verify the response.
191191
### Integrity metadata
192192

193193
To verify the integrity of a response, a user agent requires <dfn>integrity
194-
metadata</dfn>, which consists of the following pieces of information:
194+
metadata</dfn> as part of the [request][]. This metadata consists of the following
195+
pieces of information:
195196

196197
* cryptographic hash function ("alg")
197198
* [digest][] ("val")
@@ -223,6 +224,7 @@ result of the following command line:
223224

224225
echo -n "alert('Hello, world.');" | openssl dgst -sha256 -binary | openssl enc -base64 -A
225226

227+
[request]: https://fetch.spec.whatwg.org/#concept-request-integrity-metadata
226228
[csp2-section42]: http://www.w3.org/TR/CSP2/#source-list-syntax
227229
[openssl]: https://www.openssl.org/
228230
</div>

0 commit comments

Comments
 (0)