The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries
Troy Hunt
FEBRUARY 11, 2018
This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. And the UK's National Health Service. Even my own state government down here had been hit. Now, imagine if Igor took a dislike to Trump. from its current state.
97 
Let's personalize your content