ocket8888 opened a new pull request, #6826: URL: https://github.com/apache/trafficcontrol/pull/6826
This PR adds integrity hashes to resources loaded from CDNs by the `test/router` TR load tests. It also sets their `crossorigin` behavior to `anonymous`. This shouldn't really matter because they're just tests, but it's exceedingly easy to do. This PR also eliminates some prototype pollution I found in the load-test script. <hr/> ## Which Traffic Control components are affected by this PR? - unknown ## What is the best way to verify this PR? You could run the TR load tests. I don't know how. For the integrity hashes, it should suffice to just load `index.html` into a browser and verify that the scripts load - if they don't it means the hashes are wrong. ## PR submission checklist - [x] This PR has tests - [ ] This PR has documentation - [ ] This PR has a CHANGELOG.md entry - [x] This PR **DOES NOT FIX A SERIOUS SECURITY VULNERABILITY** -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
