solc-js icon indicating copy to clipboard operation
solc-js copied to clipboard

Link to compiler with SRI

Open fulldecent opened this issue 6 years ago • 0 comments

Currently in the README:

Add the version of solc you want to use into index.html:

(Alternatively use https://solc-bin.ethereum.org/bin/soljson-latest.js to get the latests version.)

This is not a security best practice. We should promote security best practices by providing a list of specific URLs and SRI hashes. Some people may prefer convenience over security and not use SRI, we can explain to them that they are taking on more risk that way.

fulldecent avatar Jan 21 '19 15:01 fulldecent