什么是完整性和跨域属性?

What are the integrity and crossorigin attributes?(什么是完整性和跨域属性?)
本文介绍了什么是完整性和跨域属性?的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着跟版网的小编来一起学习吧!

问题描述

Bootstrapcdn 最近更改了他们的链接.现在看起来像这样:

Bootstrapcdn recently changed their links. It now looks like this:

<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css" 
rel="stylesheet" 
integrity="sha256-MfvZlkHCEqatNoGiOXveE8FIwMzZg4W85qfrfIFBfYc= sha512-dTfge/zgoMYpP7QbHy4gWMEGsbsdZeCXz7irItjcC3sPUFtf0kuFbDz/ixG7ArTxmDjLXDmezHubeNikyKGVyQ==" 
crossorigin="anonymous">

integritycrossorigin 属性是什么意思?它们如何影响样式表的加载?

What do the integrity and crossorigin attributes mean? How do they affect the loading of the stylesheet?

推荐答案

Bootstrap CDN 中添加了这两个属性来实现 子资源完整性.

Both attributes have been added to Bootstrap CDN to implement Subresource Integrity.

子资源完整性定义了一种机制,用户代理可以通过该机制验证获取的资源是否已在没有意外操作的情况下交付 参考

Subresource Integrity defines a mechanism by which user agents may verify that a fetched resource has been delivered without unexpected manipulation Reference

完整性属性是允许浏览器检查文件源,以确保如果源被操纵,则永远不会加载代码.

Integrity attribute is to allow the browser to check the file source to ensure that the code is never loaded if the source has been manipulated.

Crossorigin 属性 在使用CORS"加载请求时出现,现在这是在未从同源"加载时进行 SRI 检查的要求.更多关于crossorigin的信息

Crossorigin attribute is present when a request is loaded using 'CORS' which is now a requirement of SRI checking when not loaded from the 'same-origin'. More info on crossorigin

更多关于 Bootstrap CDN 实施的细节

这篇关于什么是完整性和跨域属性?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持跟版网!

本站部分内容来源互联网,如果有图片或者内容侵犯了您的权益,请联系我们,我们会在确认后第一时间进行删除!

相关文档推荐

document.write() overwriting the document?(document.write() 覆盖文档?)
Refused to set unsafe header quot;Originquot; when using xmlHttpRequest of Google Chrome(拒绝设置不安全的标头“Origin使用谷歌浏览器的 xmlHttpRequest 时)
Why Chrome cancel CORS OPTION request(为什么 Chrome 会取消 CORS OPTION 请求)
IE10 and Cross-origin resource sharing (CORS) issues with Image / Canvas(IE10 和 Image/Canvas 的跨域资源共享 (CORS) 问题)
jQuery ajax with ES6 Promises(带有 ES6 Promises 的 jQuery ajax)
CORS and Origin header?(CORS 和 Origin 标头?)