> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://fastpix.com/docs/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://fastpix.com/docs/_mcp/server.

# Security hardening and lifecycle improvements for the Shaka Player Data SDK

> The Shaka Player Data SDK adds Subresource Integrity, validated manifest URLs, and cleaner player lifecycle handling.

The Shaka Player Data SDK is now hardened against tampered third-party code and unsafe input, with cleaner player lifecycle management.

What's new:

* **Subresource Integrity for the CDN script**: the Shaka Player CDN script now ships with an SRI hash and a `crossorigin` attribute, so tampered third-party code will not execute.

* **Validated manifest URLs**: user-provided manifest URLs are trimmed and validated before playback, and the test harness is hardened against SonarQube findings.

* **Safer global access**: `window` references were replaced with `globalThis` for environment-agnostic global access.

* **Cleaner lifecycle handling**: dedicated load and destroy controls with proper teardown prevent resource leaks.

* **Automated quality gates**: Azure Pipelines and SonarQube static analysis were added to the build.