Bug 293433

Summary:	Implement Integrity-Policy for scripts
Product:	WebKit	Reporter:	Yoav Weiss <yoav>
Component:	New Bugs	Assignee:	Yoav Weiss <yoav>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	simon.fraser, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Yoav Weiss

Reported 2025-05-22 09:35:56 PDT

Given the position on https://github.com/WebKit/standards-positions/issues/458, I'd like to implement Integrity-Policy for scripts, as defined in https://w3c.github.io/webappsec-subresource-integrity/

Attachments
Add attachment proposed patch, testcase, etc.

Yoav Weiss

Comment 1 2025-05-22 10:16:30 PDT

Pull request: https://github.com/WebKit/WebKit/pull/45773

Radar WebKit Bug Importer

Comment 2 2025-05-29 09:36:12 PDT

<rdar://problem/152244156>

Yoav Weiss

Comment 3 2025-06-05 11:57:59 PDT

Pull request: https://github.com/WebKit/WebKit/pull/46307

EWS

Comment 4 2025-06-05 19:53:56 PDT

Committed 295903@main (274542964107): <https://commits.webkit.org/295903@main> Reviewed commits have been landed. Closing PR #45773 and removing active labels.

Simon Fraser (smfr)

Comment 5 2025-06-07 13:32:30 PDT

My Xcode project keeps getting this diff now: diff --git a/Source/WebCore/WebCore.xcodeproj/project.pbxproj b/Source/WebCore/WebCore.xcodeproj/project.pbxproj index ea5c9a01556d70f0d4ec18143cdfc2a0d392df4f..7aa19d6940bf90d4d1b68c05d8197335d845bb40 100644 --- a/Source/WebCore/WebCore.xcodeproj/project.pbxproj +++ b/Source/WebCore/WebCore.xcodeproj/project.pbxproj @@ -42169,8 +42169,6 @@ 411945A92D3E3D4F00C40F6B /* InstallEvent.h in Headers */, F3ABFE0C130E9DA000E7F7D1 /* InstrumentingAgents.h in Headers */, 2D550A1429C30F3F00BD0C1F /* IntDegrees.h in Headers */, - BA79DEF12DDDF89D000DB04C /* IntegrityPolicy.h in Headers */, - BA5AA81B2DDF59210038722C /* IntegrityPolicyViolationReportBody.h in Headers */, 077FD1B32CC82C5D00C5D9E0 /* IntelligenceTextEffectsSupport.h in Headers */, 2DC05CA827D80956004ED403 /* InteractionRegion.h in Headers */, 0F4710DC1DB6FE22002DCEC3 /* IntersectionObserver.h in Headers */,

Simon Fraser (smfr)

Comment 6 2025-06-07 17:14:48 PDT

Fixing via bug 294166.

Note You need to log in before you can comment on or make changes to this bug.