expose installed service worker script contents or sum
Nobody has claimed this yet.
- Dominant language
- Bikeshed
- Stars
- 3.6k
- Forks
- 324
- Avg merge
- 14d 22h
- Merged PRs (30d)
- 1
Description
First of all, thanks for all the work !, I also really appreciate the time taken to read this issue.
I'm in need to check the service worker once downloaded to verify the consistency as per a client requirement, this feature seems easy to implement since all we need is to expose the service worker script contents, maybe it could be via the ServiceWorkerRegistration object.
This is the only feature lacking to perform a complete integrity check of all webpage resources, since we already have Subresource Integrity (SRI) and other features.
I'm not proposing a behavior modification, this would be a feature in favour of transparency.
It would be useful for sensitive applications that require integrity verification and depend on service worker features.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the ServiceWorkerRegistration API and the Service Worker specification sections covering installed worker scripts. Clarify whether the feature should expose script contents, an integrity sum, or both, then define the verification behavior and corresponding specification changes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100