HTML <script> integrity attribute
Pagsasaayos at Paggamit
integrity Ang attribute na ito ay nagbibigay ng kapangyarihan sa browser na suriin ang nakuha na script, upang matiyak na hindi ito ilalagay kung ang source code ay nabago.
Ang Subresource Integrity (SRI) ay isang W3C specification na nagbibigay ng kapangyarihan sa mga web developer na tiyakin na ang mga resource na nasa third-party server ay hindi nabago. I-rekomenda ang SRI!
Sa paggamit ng SRI, ang web page ay inilagay ang hash value, ang server ay inilagay ang file (sa kasong ito, ang .js file). Ang browser ay i-download ang file, pagkatapos ay suriin ito, upang matiyak na ito ay integrity Ang hash value ng atribute ay tumutugma. Kung tumutugma, gagamitin ang file na ito, kung hindi, ipagbawal ang file na ito.
คุณสามารถใช้เครื่องมือสร้างฮาชที่เป็นไปตามมาตราฐานของ SRI ออนไลน์เพื่อสร้างฮาชความสมบูรณ์: สร้างฮาช SRI
ตัวอย่าง
ใช้คุณสมบัติ integrity และ crossorigin พร้อมกันเพื่อลิงค์ไปยัง CDN:
<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"> </script>
ภาษา
<script integrity="filehash">
ค่าของคุณสมบัติ
| ค่า | รายละเอียด |
|---|---|
| filehash | ของเลขฮาชของไฟล์สคริปต์นอก |
การสนับสนุนโปรแกรมน่าใช้
ตัวเลขในตารางนี้ระบุสูตรรุ่นที่สนับสนุนคุณสมบัตินี้เต็มที่
| Chrome | Edge | Firefox | Safari | Opera |
|---|---|---|---|---|
| Chrome | Edge | Firefox | Safari | Opera |
| 45.0 | 17.0 | 43.0 | 13.0 | 66.0 |
