{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/31","repository_url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity","labels_url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/31/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/31/comments","events_url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/31/events","html_url":"https://github.com/w3c/webappsec-subresource-integrity/issues/31","id":148588120,"number":31,"title":"Upstream the `integrity` attribute to HTML.","user":{"login":"mikewest","id":1497,"avatar_url":"https://avatars.githubusercontent.com/u/1497?v=3","gravatar_id":"","url":"https://api.github.com/users/mikewest","html_url":"https://github.com/mikewest","followers_url":"https://api.github.com/users/mikewest/followers","following_url":"https://api.github.com/users/mikewest/following{/other_user}","gists_url":"https://api.github.com/users/mikewest/gists{/gist_id}","starred_url":"https://api.github.com/users/mikewest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikewest/subscriptions","organizations_url":"https://api.github.com/users/mikewest/orgs","repos_url":"https://api.github.com/users/mikewest/repos","events_url":"https://api.github.com/users/mikewest/events{/privacy}","received_events_url":"https://api.github.com/users/mikewest/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-04-15T08:05:56Z","updated_at":"2016-10-26T22:08:06Z","closed_at":null,"body":"Hey folks! Think you could upstream the `integrity` attribute to HTML? I'm thinking about integrating with it for CSP (along the lines of \"Hash source expressions will whitelist external scripts that declare a matching `integrity` attribute\", which seems like a reasonable extension). To do that, y'all need to start populating integrity information from HTML, which currently doesn't have much understanding of this mechanism.\r\n\r\nhttps://github.com/whatwg/fetch/pull/285 demonstrates about half of what you'd need to do. The other half would be defining the attributes, which I think you can do by copy/pasting from `nonce` in various places."},"comment":{"url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/comments/256491745","html_url":"https://github.com/w3c/webappsec-subresource-integrity/issues/31#issuecomment-256491745","issue_url":"https://api.github.com/repos/w3c/webappsec-subresource-integrity/issues/31","id":256491745,"user":{"login":"metromoxie","id":401207,"avatar_url":"https://avatars.githubusercontent.com/u/401207?v=3","gravatar_id":"","url":"https://api.github.com/users/metromoxie","html_url":"https://github.com/metromoxie","followers_url":"https://api.github.com/users/metromoxie/followers","following_url":"https://api.github.com/users/metromoxie/following{/other_user}","gists_url":"https://api.github.com/users/metromoxie/gists{/gist_id}","starred_url":"https://api.github.com/users/metromoxie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/metromoxie/subscriptions","organizations_url":"https://api.github.com/users/metromoxie/orgs","repos_url":"https://api.github.com/users/metromoxie/repos","events_url":"https://api.github.com/users/metromoxie/events{/privacy}","received_events_url":"https://api.github.com/users/metromoxie/received_events","type":"User","site_admin":false},"created_at":"2016-10-26T22:08:06Z","updated_at":"2016-10-26T22:08:06Z","body":"Alas, I was not able to start this before I head out on paternity leave shortly. If @devd can get around to it, that would be great, but otherwise, I can look at this again when I get back in Jan."}}
{"actor":{"display_login":"metromoxie"}}