Details
Description
The external Typekit stylesheet is loaded without a Subresource Integrity (SRI) attribute, which is flagged by the security scanner.
Add SRI validation to the stylesheet and verify that the scanner no longer reports the issue.
Attachments
Issue Links
- relates to
-
MXS-6305 REST-API should send the Strict-Transport-Security header if HTTPS is used
-
- In Review
-