Skip to content

SRI awards zero points with no script tags #267

@argl

Description

@argl

Feedback received:

My domain has a score of zero for "Subresource Integrity" because it contains no script tags. Meanwhile, other domains have a score of five because it contains script tags and SRI is implemented. Isn't this wrong? In theory, if my site has no script tags it should be more secure (or equally secure) as a site with script tags and SRI implemented.

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs decisionA decision is required before this issue can proceed.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions