-
-
Notifications
You must be signed in to change notification settings - Fork 200
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SRI/CORS header Access-Control-Allow-Origin missing #417
Comments
Sorry, I don't understand. What happens if you try to access stat counter with CORS? |
Resource will be blocked and you will have such error: |
Is that behavior different than if we host the file from http://127.0.0.1:4000 and do NOT have |
Yes it's different, if we have local file we doesn't check for sri/cors
Now we don't check for headers, thats why we can have error in htmlproofer that sri/cors not provided for external link, but it's not possible to fix it, becouse we can not change headers in external resource. |
Uncertain if this is still an issue, original PR was closed |
In some cases it is imposiible to add crossorigin&integrity atribute becouse header Access-Control-Allow-Origin not provided, for example here:
https://www.statcounter.com/counter/counter.js
Should we make a request for each external link and check header?
@fulldecent
The text was updated successfully, but these errors were encountered: