Add clarifying comment and a Changelog entry.

This commit is contained in:
Connor Shea 2016-06-22 16:25:59 -06:00
parent 97ec04ac9b
commit bba1d2de3b
No known key found for this signature in database
GPG key ID: E52237E5B35A83E6
2 changed files with 4 additions and 0 deletions

View file

@ -3,6 +3,7 @@ Please view this file on the master branch, on stable branches it's out of date.
v 8.10.0 (unreleased) v 8.10.0 (unreleased)
- Wrap code blocks on Activies and Todos page. !4783 (winniehell) - Wrap code blocks on Activies and Todos page. !4783 (winniehell)
- Fix MR-auto-close text added to description. !4836 - Fix MR-auto-close text added to description. !4836
- Implement Subresource Integrity for CSS and JavaScript assets. This prevents malicious assets from loading in the case of a CDN compromise.
v 8.9.0 v 8.9.0
- Fix builds API response not including commit data - Fix builds API response not including commit data

View file

@ -30,6 +30,9 @@
= javascript_include_tag "application", integrity: true = javascript_include_tag "application", integrity: true
-# FIXME: SRI doesn't apply to the dynamically-generated per-page
-# JavaScript due to a bug in sprockets-rails.
-# See https://github.com/rails/sprockets-rails/issues/359
- if page_specific_javascripts - if page_specific_javascripts
= javascript_include_tag page_specific_javascripts, {"data-turbolinks-track" => true} = javascript_include_tag page_specific_javascripts, {"data-turbolinks-track" => true}