Post

github.comGitHub - danielroe/cross-origin-storage: Load shared dependencies from Cross-Origin Storage (COS).Load shared dependencies from Cross-Origin Storage (COS). - danielroe/cross-origin-storage

I'm working with @tomayac.com to build bundler integration for this (currently a nuxt module + a vite plugin) I'd love to know: 1️⃣ if this sounds like a good idea you'd use 2️⃣ if you wanted to test it out and see if it might make a difference for you ... happy to help if you have questions! 🙏

26/6/26, 10:28 pm2 reposts18 likes

Jake Lundberg

@jakelundberg.dev

with so many supply chain issues lately, I would be very concerned about security with something like this. i love the idea for sure, but I personally lean toward security over convenience

I think the fact that resources are identified with cryptographic hashes is meant to prevent that kind of thing

Jake Lundberg

@jakelundberg.dev

that definitely helps. but (correct me if i’m wrong) verification of those hashes is not enforced, correct? so devs/vibe coders out there could just as easily skip that validation and use a corrupt resource…so the users of those systems are then at risk

verification is enforced by the browser in this proposal

chromewebstore.google.comCross-Origin Storage - Chrome Web StoreImplements the proposed Cross-Origin Storage API, letting sites share files with your consent for a faster and more efficient web.

26 June

right now testing it out means: ⚪ using the vite plugin or nuxt module ⚪ installing an 'unpacked' version of a chrome extension that polyfills this functionality ⚪ checking to see if your site still builds, and ideally comparing output _across_ several sites

Terence Eden

@edent.tel