Importmap integrity

[yoavweiss]

WebKittens

@annevk

Title of the spec

Importmap integrity

URL to the spec

whatwg/html#10269

URL to the spec's repository

https://github.com/whatwg/html

Issue Tracker URL

No response

Explainer URL

https://github.com/guybedford/import-maps-extensions?tab=readme-ov-file#integrity

TAG Design Review URL

No response

Mozilla standards-positions issue URL

mozilla/standards-positions#1010

WebKit Bugzilla URL

No response

Radar URL

No response

Description

Currently it's impossible to use ES module imports in environments that require subresource integrity for security or privacy reasons. This is a relatively small addition to the platform that would enable it.

[annevk]

Colleagues and I find it a good idea to expand the set of resources you can supply integrity metadata for. As such I suggest we resolve this as "position: support" one week from now.