Why doesn't the ArcGIS JS API CDN have an integrity value?

748
3
03-03-2020 04:54 AM
JoeHeggenstaller
New Contributor III

This is probably a really noob question that I've wondered about for years, but have never been able to determine a solid answer. Why doesn't the ArcGIS JS API CDN have Subresource Integrity hash (SHA256, SHA384) and crossorigin values? Similar to other libraries like jQuery?

<script src="https://code.jquery.com/jquery-3.4.1.min.js" integrity="sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" crossorigin="anonymous"></script>

Thanks.

Tags (4)
3 Replies
ChadCooper1
New Contributor

@JuliePowell - could you help out here please? I've got the same question. Thanks.

0 Kudos
JuliePowell
Esri Contributor

Hi Joe & Chad,

We don't advertise the hash because it may break when the CDN is patched. However, if you want to compute it, feel free to add it. If you have more questions about this, @DasaPaddock can help.
 
Julie

 

0 Kudos
JoeHeggenstaller
New Contributor III

Thanks Julie for the information. We'll check it out.

0 Kudos