Integrity Checking the autoupdated sdk

Hi everyone,

Is there a way to check the integrity of the auto updating version of the Apple Pay JS SDK?

SRI can only be used for the semantic version.

Any help/suggestion is appreciated.

Answered by DTS Engineer in 893687022

Hi @by_ptr,

You wrote:

Is there a way to check the integrity of the auto updating version of the Apple Pay JS SDK?

Integrity checks, such as Subresource Integrity (SRI), are not recommended for the auto-updating version of the Apple Pay JS SDK (1.latest). This is because the contents of the auto-updating SDK are subject to change, which would break any integrity checks. Integrity checks are a best practice when loading semantic versions of the SDK from a third-party source.

To learn more, see the following documentation:

Loading the latest version of the Apple Pay JS SDK

https://developer.apple.com/documentation/applepayontheweb/loading-the-latest-version-of-apple-pay-js

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @by_ptr,

You wrote:

Is there a way to check the integrity of the auto updating version of the Apple Pay JS SDK?

Integrity checks, such as Subresource Integrity (SRI), are not recommended for the auto-updating version of the Apple Pay JS SDK (1.latest). This is because the contents of the auto-updating SDK are subject to change, which would break any integrity checks. Integrity checks are a best practice when loading semantic versions of the SDK from a third-party source.

To learn more, see the following documentation:

Loading the latest version of the Apple Pay JS SDK

https://developer.apple.com/documentation/applepayontheweb/loading-the-latest-version-of-apple-pay-js

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Integrity Checking the autoupdated sdk
 
 
Q