Subresource Integrity when using the CDN

1 Answer 122 Views
General Discussions
Bill
Top achievements
Rank 1
Bill asked on 21 Aug 2023, 03:51 PM

Hi,

I would like to implement the subresource integrity check on the scripts and stylesheets which are brought in from the Kendo CDN. However I wanted to check something first. I have added the scripts based on this guide https://docs.telerik.com/kendo-ui/intro/installation/cdn-service. However there are no integrity hashes for the files. Are these available anywhere? If not I can generate them from the files manually, but this won't work if the scripts are ever modified.

Are the scripts ever changed once deployed in a version? Does every server in the CDN deliver always the exact same bytes for the file?

Many thanks,

Bill

 

1 Answer, 1 is accepted

Sort by
0
Martin
Telerik team
answered on 24 Aug 2023, 09:56 AM

Hello, Bill,

You will need to generate the integrity hashes only when you upgrade to a newer version. The script files cannot be modified once distributed within the same version. 

Let me know if you had something else in mind. 

Regards,
Martin
Progress Telerik

Stay tuned by visiting our public roadmap and feedback portal pages! Or perhaps, if you are new to our Kendo family, check out our getting started resources
Tags
General Discussions
Asked by
Bill
Top achievements
Rank 1
Answers by
Martin
Telerik team
Share this question
or