Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

How to establish authenticity of Web SDK ? #1

Open
kunalgithub opened this issue Jan 4, 2022 · 0 comments
Open

How to establish authenticity of Web SDK ? #1

kunalgithub opened this issue Jan 4, 2022 · 0 comments

Comments

@kunalgithub
Copy link

kunalgithub commented Jan 4, 2022 •
edited
Loading

AA Web Sdk is a javascript library developed by Licensed AA.

  1. The embedding site (example FIU , LSP ) should implement Content Security Policy - which enforces the sources of JavaScript -

  2. The AA Web SDK should establish authenticity by using "integrity" attribute of <script> tag

  3. AA Web SDK should be loaded from either AA's Web server or through CDN hosting

  4. In Case of CDN hosting - the client [ example FIU , LSP ] of AA Web SDK should not have control over publishing into CDN

  5. The domain or Subdomain of hosted WebSDK should not same as that of Client [ example FIU , LSP ]

  6. Web SDK should always be "minified"

@dheerajkhardwal @TeamSahamati
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@kunalgithub