kernel-audit-integration-security

When to use

• user is adding a third-party script, font, or stylesheet from a CDN
• user is integrating an analytics, tracking, or marketing tool
• user is embedding an iframe or external widget
• user is configuring a Content Security Policy
• user is adding an API key or integration credential to the frontend
• user is loading any external resource not self-hosted
• Use before adding any external dependency to a frontend bundle or HTML page
• Use when reviewing CSP headers or CORS configuration related to frontend integrations
• Use when evaluating whether a third-party tool is safe to integrate

Outputs

• Integration security decision
• CSP or SRI requirements for the integration
• Security checklist result for the integration

Definition of done