TAP-10 v1.1 的 DeWEB 站点脚本源隔离规则TAP-10 v1.1: DeWEB Site Script Source Isolation
TAP-10 v1.1 规定 DeWEB 站点源隔离。TapeOutWorld 进一步说明该规则的具体执行方式:在 DeWEB 站点上运行的脚本只能是该站点自己上链的文件,不能在运行过程中临时从别处拉取一段代码;页面所看到的内容就是链上注册的那组文件,如果指纹不匹配,脚本就不会加载。TAP-10 v1.1 specifies source isolation for DeWEB sites. TapeOutWorld further explains how the rule works in practice: scripts running on a DeWEB site can only be files that site itself put on chain, with no pulling in a chunk of code from somewhere else on the fly; the page you see is the set of files registered on chain, and if a fingerprint does not match, it does not load.
来源 · 2 条Sources · 2
- @TapeOutWorld
When you open two websites on DeWEB, they're kept apart TAP-10 v1.1 sets out origin isolation Each site has its own separate origin One site can't read another site's data Your session on site A can't be touched by site B
- @TapeOutWorld
Scripts running on a DeWEB site can only be files that site itself put On Chain No pulling in a chunk of code from somewhere else on the fly The page you see is the set of files registered On Chain If a fingerprint doesn't match, it doesn't load