You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To help establish a consistent and, more importantly, a trusted process to minify the static/js contents, this should be 100% automated in a public way. My initial thought would be to use a GitHub Action that auto-minifies and commits when any of the static/js/*.js files change.
When looking at my contribution to [bootstrap5.modal.forms.js](https://github.com/trco/django-bootstrap-modal-forms/blob/master/bootstrap_modal_forms/static/js/bootstrap5.modal.forms.js), I realized I could have put something malicious in, minified it, and there would have been no way for the community to verify the contents of that commit.
The text was updated successfully, but these errors were encountered:
To help establish a consistent and, more importantly, a trusted process to minify the
static/js
contents, this should be 100% automated in a public way. My initial thought would be to use a GitHub Action that auto-minifies and commits when any of thestatic/js/*.js
files change.When looking at my contribution to
[bootstrap5.modal.forms.js](https://github.com/trco/django-bootstrap-modal-forms/blob/master/bootstrap_modal_forms/static/js/bootstrap5.modal.forms.js)
, I realized I could have put something malicious in, minified it, and there would have been no way for the community to verify the contents of that commit.The text was updated successfully, but these errors were encountered: