A 33-hour Office.js rollout that changed four bytes

If you build Office add-ins, you load Office.js from one fixed URL: https://appsforoffice.microsoft.com/lib/1/hosted/office.js There is no version in that URL, no changelog for what it serves, and no Subresource Integrity hash you could pin. Microsoft ships new code behind it whenever it decides to, and your add-in picks it up the next time Office... Weiterlesen: A 33-hour Office.js rollout that changed four bytes