This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 267853 - Support Integrity attribute on link and script tags
Summary: Support Integrity attribute on link and script tags
Status: NEW
Alias: None
Product: web
Classification: Unclassified
Component: HTML Editor (show other bugs)
Version: 8.2
Hardware: PC Linux
: P3 normal with 8 votes (vote)
Assignee: Milutin Kristofic
URL:
Keywords:
: 269580 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-09-04 08:15 UTC by Jenselme
Modified: 2019-07-15 20:12 UTC (History)
4 users (show)

See Also:
Issue Type: DEFECT
Exception Reporter:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jenselme 2016-09-04 08:15:02 UTC 
For instance if you copy the code to use bootstrap CDN from http://getbootstrap.com/getting-started/#download-cdn, you'll get warnings saying that integrity attribute is not allowed at this point for script and link tag. However, this new attribute is valid: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">

<!-- Optional theme -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">

<!-- Latest compiled and minified JavaScript -->
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>

NetBeans should report the tag as valid. What would also be nice is to use the value from the integrity attribute and display a warning if the file doesn't match the provided hash.
Comment 1 jochemb 2017-01-25 20:10:03 UTC 
*** Bug 269580 has been marked as a duplicate of this bug. ***
Comment 2 moueza 2019-07-15 20:12:44 UTC 
Still current in Netbeans 10.0