topic Re: ArcGIS API's SRI hash has changed in ArcGIS JavaScript Maps SDK Questions

ArcGIS API's SRI hash has changed

JeffJacobson — Wed, 21 Sep 2016 16:39:30 GMT

It appears the http://js.arcgis.com/3.17/init.js file has changed, causing SRI checks to fail. Did Esri intentionally change the file recently, or has there been a hack? I thought that once a version of the API was released, it was not supposed to change. (An update would require a new version number.)

Re: ArcGIS API's SRI hash has changed

SteveCole — Wed, 21 Sep 2016 19:28:25 GMT

I don't know anything about this but I was just trying to use your GeoPortal app yesterday and it wasn't loading due to that error. I was going to report it to you but the weird thing was that it still loaded on my iPhone- just not my work computer. I just chalked it up to some change by our IT department.

Re: ArcGIS API's SRI hash has changed

JeffJacobson — Wed, 21 Sep 2016 22:56:26 GMT

I updated the "integrity" tag in the GeoPortal HTML so that it would work again. (The GeoPortal failure is what prompted this question.) The reason that it worked on your iPhone is that iOS doesn't support subresource integrity checking.

Re: ArcGIS API's SRI hash has changed

BjornSvensson — Thu, 22 Sep 2016 16:01:51 GMT

Yes, that was an intentional change to support recent/upcoming versions of Chrome/Safari/Firefox. See https://blogs.esri.com/esri/supportcenter/2016/09/20/announcement-errors-encountered-in-arcgis-for-server-and-portal-for-arcgis-web-apps-after-certain-browser-updates/ for more background information.