RESOLVED FIXED293433
Implement Integrity-Policy for scripts 
https://bugs.webkit.org/show_bug.cgi?id=293433
Summary Implement Integrity-Policy for scripts
Yoav Weiss
Reported 2025-05-22 09:35:56 PDT
Given the position on https://github.com/WebKit/standards-positions/issues/458, I'd like to implement Integrity-Policy for scripts, as defined in https://w3c.github.io/webappsec-subresource-integrity/
Attachments
Add attachment proposed patch, testcase, etc.
Yoav Weiss
Comment 1 2025-05-22 10:16:30 PDT
Pull request: https://github.com/WebKit/WebKit/pull/45773
Radar WebKit Bug Importer
Comment 2 2025-05-29 09:36:12 PDT
<rdar://problem/152244156>
Yoav Weiss
Comment 3 2025-06-05 11:57:59 PDT
Pull request: https://github.com/WebKit/WebKit/pull/46307
EWS
Comment 4 2025-06-05 19:53:56 PDT
Committed 295903@main (274542964107): <https://commits.webkit.org/295903@main> Reviewed commits have been landed. Closing PR #45773 and removing active labels.
Simon Fraser (smfr)
Comment 5 2025-06-07 13:32:30 PDT
My Xcode project keeps getting this diff now: diff --git a/Source/WebCore/WebCore.xcodeproj/project.pbxproj b/Source/WebCore/WebCore.xcodeproj/project.pbxproj index ea5c9a01556d70f0d4ec18143cdfc2a0d392df4f..7aa19d6940bf90d4d1b68c05d8197335d845bb40 100644 --- a/Source/WebCore/WebCore.xcodeproj/project.pbxproj +++ b/Source/WebCore/WebCore.xcodeproj/project.pbxproj @@ -42169,8 +42169,6 @@ 411945A92D3E3D4F00C40F6B /* InstallEvent.h in Headers */, F3ABFE0C130E9DA000E7F7D1 /* InstrumentingAgents.h in Headers */, 2D550A1429C30F3F00BD0C1F /* IntDegrees.h in Headers */, - BA79DEF12DDDF89D000DB04C /* IntegrityPolicy.h in Headers */, - BA5AA81B2DDF59210038722C /* IntegrityPolicyViolationReportBody.h in Headers */, 077FD1B32CC82C5D00C5D9E0 /* IntelligenceTextEffectsSupport.h in Headers */, 2DC05CA827D80956004ED403 /* InteractionRegion.h in Headers */, 0F4710DC1DB6FE22002DCEC3 /* IntersectionObserver.h in Headers */,
Simon Fraser (smfr)
Comment 6 2025-06-07 17:14:48 PDT
Fixing via bug 294166.
Note You need to log in before you can comment on or make changes to this bug.