query re: sri
SignpostMarv opened this issue · comments
If I know what the hash of a module should be ahead of time, is it possible to await import(url, {integrity: 'sha384-' + hash});, which would use the usual subresource integrity mechanics of the user agent to throw an error if the module doesn't match?
closing as duplicate of #76