The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries
Troy Hunt
FEBRUARY 11, 2018
This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. Even my own state government down here had been hit. Let's compare the two scripts I've just mentioned, those being Report URI JS and Browsealoud.
97 
Let's personalize your content