3

The description from Mozilla warns that require-sri-for is obsolete and may be removed at any time.

The feature seems useful, especially for large websites where it's likely that a developer may forget to include an integrity attribute.

Is there a specific reason this has been deprecated? Is there an alternative feature to use instead?

Improve this question
2

1 Answer 1

Reset to default
2

Firefox 68 for developers explains:

The Content-Security-Policy directive require-sri-for is no longer supported due to concerns about its standardization status. It was previously available only behind a preference, which was off by default (bug 1386214).

Hopefully it will be back when the directive is standardized.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .