{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec/issues/384","labels_url":"https://api.github.com/repos/w3c/webappsec/issues/384/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec/issues/384/comments","events_url":"https://api.github.com/repos/w3c/webappsec/issues/384/events","html_url":"https://github.com/w3c/webappsec/issues/384","id":80402794,"number":384,"title":"SRI: should integrity checks be restricted to 200 responses?","user":{"login":"fmarier","id":167821,"avatar_url":"https://avatars.githubusercontent.com/u/167821?v=3","gravatar_id":"","url":"https://api.github.com/users/fmarier","html_url":"https://github.com/fmarier","followers_url":"https://api.github.com/users/fmarier/followers","following_url":"https://api.github.com/users/fmarier/following{/other_user}","gists_url":"https://api.github.com/users/fmarier/gists{/gist_id}","starred_url":"https://api.github.com/users/fmarier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fmarier/subscriptions","organizations_url":"https://api.github.com/users/fmarier/orgs","repos_url":"https://api.github.com/users/fmarier/repos","events_url":"https://api.github.com/users/fmarier/events{/privacy}","received_events_url":"https://api.github.com/users/fmarier/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec/labels/SRI","name":"SRI","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/w3c/webappsec/milestones/3","html_url":"https://github.com/w3c/webappsec/milestones/SRI-v1-LC","labels_url":"https://api.github.com/repos/w3c/webappsec/milestones/3/labels","id":895505,"number":3,"title":"SRI-v1-LC","description":"Let's conservatively try to include things for the \"minimum viable\" SRI into this milestone. Last Call should happen in January 2015 according to the (draft) charter's milestones.","creator":{"login":"mozfreddyb","id":5418775,"avatar_url":"https://avatars.githubusercontent.com/u/5418775?v=3","gravatar_id":"","url":"https://api.github.com/users/mozfreddyb","html_url":"https://github.com/mozfreddyb","followers_url":"https://api.github.com/users/mozfreddyb/followers","following_url":"https://api.github.com/users/mozfreddyb/following{/other_user}","gists_url":"https://api.github.com/users/mozfreddyb/gists{/gist_id}","starred_url":"https://api.github.com/users/mozfreddyb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozfreddyb/subscriptions","organizations_url":"https://api.github.com/users/mozfreddyb/orgs","repos_url":"https://api.github.com/users/mozfreddyb/repos","events_url":"https://api.github.com/users/mozfreddyb/events{/privacy}","received_events_url":"https://api.github.com/users/mozfreddyb/received_events","type":"User","site_admin":false},"open_issues":13,"closed_issues":64,"state":"open","created_at":"2014-12-08T10:39:40Z","updated_at":"2015-05-28T18:55:08Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2015-05-25T05:42:41Z","updated_at":"2015-05-28T19:04:40Z","closed_at":null,"body":"On https://lists.w3.org/Archives/Public/public-webappsec/2015May/0029.html, @manger suggested this:\r\n\r\n> A better way to do this would be to say a resource is not eligible for integrity validation if it is returned with a 401 (Unauthorized) or 407 (Proxy authentication required) status.\r\n>\r\n> In fact, perhaps any response without a 2xx status should be ineligible; or restrict it to only 200 (Ok) responses.\""},"comment":{"url":"https://api.github.com/repos/w3c/webappsec/issues/comments/106567712","html_url":"https://github.com/w3c/webappsec/issues/384#issuecomment-106567712","issue_url":"https://api.github.com/repos/w3c/webappsec/issues/384","id":106567712,"user":{"login":"devd","id":136985,"avatar_url":"https://avatars.githubusercontent.com/u/136985?v=3","gravatar_id":"","url":"https://api.github.com/users/devd","html_url":"https://github.com/devd","followers_url":"https://api.github.com/users/devd/followers","following_url":"https://api.github.com/users/devd/following{/other_user}","gists_url":"https://api.github.com/users/devd/gists{/gist_id}","starred_url":"https://api.github.com/users/devd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/devd/subscriptions","organizations_url":"https://api.github.com/users/devd/orgs","repos_url":"https://api.github.com/users/devd/repos","events_url":"https://api.github.com/users/devd/events{/privacy}","received_events_url":"https://api.github.com/users/devd/received_events","type":"User","site_admin":false},"created_at":"2015-05-28T19:04:40Z","updated_at":"2015-05-28T19:04:40Z","body":"does \"not eligible\" mean it will fail the check? then I am fine with this."}}