[Buildroot] [PATCH v2] docs/website: consolidate CDN's and enable SRI

Peter Korsgaard peter at korsgaard.com
Mon Feb 4 12:34:58 UTC 2019


>>>>> "Angelo" == Angelo Compagnucci <angelo at amarulasolutions.com> writes:

 > From: James Hilliard <james.hilliard1 at gmail.com>
 > Some of our cdn's are going discontinued (rawgit) and some others are
 > not recommended anymore, thus we update to the recommended cdnjs.
 > This patch enables also SRI protection on js to be sure the modules we
 > download are not manipulated in any way.

It would be great for people not doing web things (E.G. me) to add the

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

to explain what SRI is.

The files we get from these CDNs are not that big, E.G:

-rw-r--r--  1 peko peko 139K May 17  2018 bootstrap.min.css
-rw-r--r--  1 peko peko  37K May 17  2018 bootstrap.min.js
-rw-r--r--  1 peko peko 2.4K May 17  2018 html5shiv.js
-rw-r--r--  1 peko peko  85K May 17  2018 jquery.min.js
-rw-r--r--  1 peko peko 4.0K May 17  2018 respond.min.js

Does it make sense to use those CDNs that we don't have under our
control, or should we just commit these files?

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list