Web Security

Subresource Integrity

English

Overview

A mechanism that uses a hash value to verify that an externally loaded file, such as JavaScript, has not been tampered with.

Details

Commonly abbreviated SRI. By specifying the expected hash value in the HTML for a library loaded via a CDN, the browser will refuse to execute the file if it's ever replaced with a tampered version—even if the CDN itself is compromised.

More Security terms