{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec/issues/238","labels_url":"https://api.github.com/repos/w3c/webappsec/issues/238/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec/issues/238/comments","events_url":"https://api.github.com/repos/w3c/webappsec/issues/238/events","html_url":"https://github.com/w3c/webappsec/issues/238","id":66464911,"number":238,"title":"SRI: Integration with Fetch","user":{"login":"annevk","id":1544111,"avatar_url":"https://avatars.githubusercontent.com/u/1544111?v=3","gravatar_id":"","url":"https://api.github.com/users/annevk","html_url":"https://github.com/annevk","followers_url":"https://api.github.com/users/annevk/followers","following_url":"https://api.github.com/users/annevk/following{/other_user}","gists_url":"https://api.github.com/users/annevk/gists{/gist_id}","starred_url":"https://api.github.com/users/annevk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/annevk/subscriptions","organizations_url":"https://api.github.com/users/annevk/orgs","repos_url":"https://api.github.com/users/annevk/repos","events_url":"https://api.github.com/users/annevk/events{/privacy}","received_events_url":"https://api.github.com/users/annevk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec/labels/SRI","name":"SRI","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/w3c/webappsec/milestones/3","html_url":"https://github.com/w3c/webappsec/milestones/SRI-v1-LC","labels_url":"https://api.github.com/repos/w3c/webappsec/milestones/3/labels","id":895505,"number":3,"title":"SRI-v1-LC","description":"Let's conservatively try to include things for the \"minimum viable\" SRI into this milestone. Last Call should happen in January 2015 according to the (draft) charter's milestones.","creator":{"login":"mozfreddyb","id":5418775,"avatar_url":"https://avatars.githubusercontent.com/u/5418775?v=3","gravatar_id":"","url":"https://api.github.com/users/mozfreddyb","html_url":"https://github.com/mozfreddyb","followers_url":"https://api.github.com/users/mozfreddyb/followers","following_url":"https://api.github.com/users/mozfreddyb/following{/other_user}","gists_url":"https://api.github.com/users/mozfreddyb/gists{/gist_id}","starred_url":"https://api.github.com/users/mozfreddyb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozfreddyb/subscriptions","organizations_url":"https://api.github.com/users/mozfreddyb/orgs","repos_url":"https://api.github.com/users/mozfreddyb/repos","events_url":"https://api.github.com/users/mozfreddyb/events{/privacy}","received_events_url":"https://api.github.com/users/mozfreddyb/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":71,"state":"open","created_at":"2014-12-08T10:39:40Z","updated_at":"2015-06-08T22:18:50Z","due_on":null,"closed_at":null},"comments":25,"created_at":"2015-04-05T17:57:25Z","updated_at":"2015-06-10T17:18:24Z","closed_at":null,"body":"I think point 5 is missing that we basically don't want to give the page any kind of notification until we have end-of-file, no? So any callbacks need to be suppressed until we can verify the integrity and once that is done we can run all three in sequence.\r\n\r\nAlso, rather than having section 3.9, that should also be a modification to Fetch I think. We should simply return a network error and that will make HTML do the right thing. And since only `script` and `link rel=stylesheet` can set integrity to begin with, not much else is needed."},"comment":{"url":"https://api.github.com/repos/w3c/webappsec/issues/comments/110842066","html_url":"https://github.com/w3c/webappsec/issues/238#issuecomment-110842066","issue_url":"https://api.github.com/repos/w3c/webappsec/issues/238","id":110842066,"user":{"login":"metromoxie","id":401207,"avatar_url":"https://avatars.githubusercontent.com/u/401207?v=3","gravatar_id":"","url":"https://api.github.com/users/metromoxie","html_url":"https://github.com/metromoxie","followers_url":"https://api.github.com/users/metromoxie/followers","following_url":"https://api.github.com/users/metromoxie/following{/other_user}","gists_url":"https://api.github.com/users/metromoxie/gists{/gist_id}","starred_url":"https://api.github.com/users/metromoxie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/metromoxie/subscriptions","organizations_url":"https://api.github.com/users/metromoxie/orgs","repos_url":"https://api.github.com/users/metromoxie/repos","events_url":"https://api.github.com/users/metromoxie/events{/privacy}","received_events_url":"https://api.github.com/users/metromoxie/received_events","type":"User","site_admin":false},"created_at":"2015-06-10T17:18:24Z","updated_at":"2015-06-10T17:18:24Z","body":"Got it! Thanks for the clarifications. Pretty embarrassed that I missed that in my first pass :-) I took a first whack at adding this in issue 398. Let me know if it looks good."}}