Add subresource integrity (SRI) feature and resource integrity group (#3932)

* Add subresource integrity (SRI) feature
* Add resource integrity group

Author: ddbeck

features/fetch.yml

@@ -39,7 +39,6 @@ compat_features:
   - api.Request.credentials.default_same-origin
   - api.Request.destination
   - api.Request.duplex
-  - api.Request.integrity
   - api.Request.isHistoryNavigation
   - api.Request.headers
   - api.Request.json

features/fetch.yml.dist

@@ -89,19 +89,6 @@ compat_features:
   #   safari_ios: "10.3"
   - api.Request.redirect
 
-  # baseline: high
-  # baseline_low_date: 2017-03-27
-  # baseline_high_date: 2019-09-27
-  # support:
-  #   chrome: "46"
-  #   chrome_android: "46"
-  #   edge: "14"
-  #   firefox: "51"
-  #   firefox_android: "51"
-  #   safari: "10.1"
-  #   safari_ios: "10.3"
-  - api.Request.integrity
-
   # baseline: high
   # baseline_low_date: 2017-03-27
   # baseline_high_date: 2019-09-27

features/link.yml

@@ -11,7 +11,6 @@ compat_features:
   - api.HTMLLinkElement.disabled
   - api.HTMLLinkElement.href
   - api.HTMLLinkElement.hreflang
-  - api.HTMLLinkElement.integrity
   - api.HTMLLinkElement.media
   - api.HTMLLinkElement.rel
   - api.HTMLLinkElement.relList
@@ -23,7 +22,6 @@ compat_features:
   - html.elements.link.disabled
   - html.elements.link.href
   - html.elements.link.hreflang
-  - html.elements.link.integrity
   - html.elements.link.media
   - html.elements.link.rel
   - html.elements.link.sizes

features/link.yml.dist

@@ -67,20 +67,6 @@ compat_features:
   - api.HTMLLinkElement.crossOrigin
   - html.elements.link.crossorigin
 
-  # baseline: high
-  # baseline_low_date: 2018-04-30
-  # baseline_high_date: 2020-10-30
-  # support:
-  #   chrome: "45"
-  #   chrome_android: "45"
-  #   edge: "17"
-  #   firefox: "43"
-  #   firefox_android: "43"
-  #   safari: "11.1"
-  #   safari_ios: "11.3"
-  - api.HTMLLinkElement.integrity
-  - html.elements.link.integrity
-
   # baseline: high
   # baseline_low_date: 2018-04-30
   # baseline_high_date: 2020-10-30

features/script.yml

@@ -9,7 +9,6 @@ compat_features:
   - api.HTMLScriptElement.async
   - api.HTMLScriptElement.crossOrigin
   - api.HTMLScriptElement.defer
-  - api.HTMLScriptElement.integrity
   - api.HTMLScriptElement.src
   - api.HTMLScriptElement.supports_static
   - api.HTMLScriptElement.text
@@ -18,7 +17,6 @@ compat_features:
   - html.elements.script.async
   - html.elements.script.crossorigin
   - html.elements.script.defer
-  - html.elements.script.integrity
   - html.elements.script.src
   - html.elements.script.type
   - html.elements.noscript

features/script.yml.dist

@@ -125,20 +125,6 @@ compat_features:
   - api.HTMLScriptElement.crossOrigin
   - html.elements.script.crossorigin
 
-  # baseline: high
-  # baseline_low_date: 2018-04-30
-  # baseline_high_date: 2020-10-30
-  # support:
-  #   chrome: "45"
-  #   chrome_android: "45"
-  #   edge: "17"
-  #   firefox: "43"
-  #   firefox_android: "43"
-  #   safari: "11.1"
-  #   safari_ios: "11.3"
-  - api.HTMLScriptElement.integrity
-  - html.elements.script.integrity
-
   # baseline: high
   # baseline_low_date: 2022-09-12
   # baseline_high_date: 2025-03-12

features/signature-based-resource-integrity.yml

@@ -1,6 +1,7 @@
 name: Signature-based resource integrity
 description: Signature-based resource integrity verifies a script's provenance by checking that the resource has been signed with a trusted key given by the `<script>` element's `integrity` attribute.
 spec: https://wicg.github.io/signature-based-sri/
+group: integrity
 compat_features:
   - html.elements.script.integrity.ed25519_public_key
   - http.headers.Signature

features/subresource-integrity.yml

@@ -0,0 +1,10 @@
+name: Subresource integrity
+description: Subresource integrity verifies that a resource, such as script served from a content delivery network, matches a known cryptographic hash. Also known as SRI.
+spec: https://w3c.github.io/webappsec-subresource-integrity/
+caniuse: subresource-integrity
+group: integrity
+compat_features:
+  - api.Request.integrity
+  - html.elements.link.integrity
+  - api.HTMLScriptElement.integrity
+  - html.elements.script.integrity

features/subresource-integrity.yml.dist

@@ -0,0 +1,43 @@
+# Generated from: subresource-integrity.yml
+# Do not edit this file by hand. Edit the source file instead!
+
+status:
+  baseline: high
+  baseline_low_date: 2018-04-30
+  baseline_high_date: 2020-10-30
+  support:
+    chrome: "46"
+    chrome_android: "46"
+    edge: "17"
+    firefox: "51"
+    firefox_android: "51"
+    safari: "11.1"
+    safari_ios: "11.3"
+compat_features:
+  # baseline: high
+  # baseline_low_date: 2017-03-27
+  # baseline_high_date: 2019-09-27
+  # support:
+  #   chrome: "46"
+  #   chrome_android: "46"
+  #   edge: "14"
+  #   firefox: "51"
+  #   firefox_android: "51"
+  #   safari: "10.1"
+  #   safari_ios: "10.3"
+  - api.Request.integrity
+
+  # baseline: high
+  # baseline_low_date: 2018-04-30
+  # baseline_high_date: 2020-10-30
+  # support:
+  #   chrome: "45"
+  #   chrome_android: "45"
+  #   edge: "17"
+  #   firefox: "43"
+  #   firefox_android: "43"
+  #   safari: "11.1"
+  #   safari_ios: "11.3"
+  - api.HTMLScriptElement.integrity
+  - html.elements.link.integrity
+  - html.elements.script.integrity

groups/integrity.yml

@@ -0,0 +1 @@
+name: Resource integrity