Hi,
I would like to implement the subresource integrity check on the scripts and stylesheets which are brought in from the Kendo CDN. However I wanted to check something first. I have added the scripts based on this guide https://docs.telerik.com/kendo-ui/intro/installation/cdn-service. However there are no integrity hashes for the files. Are these available anywhere? If not I can generate them from the files manually, but this won't work if the scripts are ever modified.
Are the scripts ever changed once deployed in a version? Does every server in the CDN deliver always the exact same bytes for the file?
Many thanks,
Bill
1 Answer, 1 is accepted
Hello, Bill,
You will need to generate the integrity hashes only when you upgrade to a newer version. The script files cannot be modified once distributed within the same version.
Let me know if you had something else in mind.
Regards,
Martin
Progress Telerik