First, identify inline scripts to be signed: <SCRIPT ... ARCHIVE="some.jar" ID="1"> |
The script ID must be unique in the JAR |
JavaScript source files don't need an ID: <SCRIPT ... ARCHIVE="some.jar" SRC="file.js"> |
Note: Only one ARCHIVE attribute per document is necessary, in which case all signed objects are stored in a single JAR |