Shopify

Shipping support for module script integrity in Chrome & Safari - Shopify

Aug 2, 2024
Shipping support for module script integrity in Chrome & Safari - Shopify
SummaryAI, from the source post

Shopify engineers collaborated with browser vendors to integrate Subresource Integrity (SRI) metadata into import maps, enabling integrity verification for imported JavaScript modules. This involved developing a working implementation in Chromium, contributing to the HTML specification, and implementing the feature in WebKit. The solution allows for dynamic imports (`import()`) to be securely verified via hashes mapped in import maps, addressing a critical capability gap in SRI that previously prevented its use with modules.

More from the Import Maps and JavaScript Module Loading trail