什么是完整性和跨域属性?
Bootstrapcdn 最近更改了他们的链接.现在看起来像这样:
Bootstrapcdn recently changed their links. It now looks like this:
<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css"
rel="stylesheet"
integrity="sha256-MfvZlkHCEqatNoGiOXveE8FIwMzZg4W85qfrfIFBfYc= sha512-dTfge/zgoMYpP7QbHy4gWMEGsbsdZeCXz7irItjcC3sPUFtf0kuFbDz/ixG7ArTxmDjLXDmezHubeNikyKGVyQ=="
crossorigin="anonymous">
integrity 和 crossorigin 属性是什么意思?它们如何影响样式表的加载?
What do the integrity and crossorigin attributes mean? How do they affect the loading of the stylesheet?
推荐答案
Bootstrap CDN 中添加了这两个属性来实现 子资源完整性.
Both attributes have been added to Bootstrap CDN to implement Subresource Integrity.
子资源完整性定义了一种机制，用户代理可以通过该机制验证获取的资源是否已在没有意外操作的情况下交付 参考
Subresource Integrity defines a mechanism by which user agents may verify that a fetched resource has been delivered without unexpected manipulation Reference
完整性属性是允许浏览器检查文件源，以确保如果源被操纵，则永远不会加载代码.
Integrity attribute is to allow the browser to check the file source to ensure that the code is never loaded if the source has been manipulated.
Crossorigin 属性 在使用CORS"加载请求时出现，现在这是在未从同源"加载时进行 SRI 检查的要求.更多关于crossorigin的信息
Crossorigin attribute is present when a request is loaded using 'CORS' which is now a requirement of SRI checking when not loaded from the 'same-origin'. More info on crossorigin
更多关于 Bootstrap CDN 实施的细节
相关文章