Project

General

Profile

Actions
Copy link

SecOps #451

open
CD

[Sécurité] Vulnérabilité de code : index.html:5 (html.security.audit.missing-integrity.missing-integrity)

SecOps #451: [Sécurité] Vulnérabilité de code : index.html:5 (html.security.audit.missing-integrity.missing-integrity)

Added by Client Dashboard about 2 months ago. Updated about 1 month ago.

Status:
Preprod
Priority:
Normal
Assignee:
-
Start date:
06/15/2026
Due date:
% Done:

0%

Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
deployed
preprod_url:
https://preprod-scobby.omdev.tech
deployed_at:
06/23/2026
branch:
worktree-secops-semgrep
pr_url:
https://github.com/Scobby-organisation/scobby/pull/64
security_key:
index.html:5_html.security.audit.missing-integrity.missing-integrity
severity:
medium
paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : index.html:5
**Règle** : html.security.audit.missing-integrity.missing-integrity

This tag is missing an 'integrity' subresource integrity attribute. The 'integrity' attribute allows for the browser to verify that externally hosted files (for example from a CDN) are delivered without unexpected manipulation. Without this attribute, if an attacker can modify the externally hosted resource, this could lead to XSS and other types of attacks. To prevent this, include the base64-encoded cryptographic hash of the resource (file) you’re telling the browser to fetch in the 'integrity' attribute for all externally hosted files.

### Extrait de code
```
requires login
```

### Lien CVE
https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures

Actions
Copy link

Also available in: PDF Atom