[Identity-Digest] Wiring up basic enforcement.
This patch enforces server-delivered Identity-Digest
headers for
fetch()
, script, and style sources to match SRI's behavior. The patch does not do any work to wire Identity-Digest
up to devtools. If we
decide to move beyond prototyping this mechanism, it'll need some
additional infrastructure to help developers understand the behavior.
This is part of a chain of CLs implementing this feature:
- [Parsing] https://crrev.com/c/5961577
- [Matching] https://crrev.com/c/5961839
- [Enforcement] https://crrev.com/c/5966593 [You are here]
Bug: 375343417
Change-Id: I914efe9ed796d2609f812ea140827be7c58101ae
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5966593
Reviewed-by: Camille Lamy clamy@chromium.org
Commit-Queue: Mike West mkwst@chromium.org
Cr-Commit-Position: refs/heads/main@{#1388744}