The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries
Troy Hunt
FEBRUARY 11, 2018
This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. And the UK's National Health Service. And yes, this takes work: Is the tl;dr that good security takes some planning? It was the US Courts too.
95 
Let's personalize your content