🛡️ Security

Subresource Integrity (SRI)

A browser feature in which a script or stylesheet tag carries an integrity attribute holding a cryptographic hash of the expected file; the browser refuses to execute the resource if its hash does not match. It pins one exact version, so it breaks when the vendor updates the file.

📚 Deep Dive

Learn Article

Why a Third-Party Script Tag Hands Its Vendor Control of Every Page It Loads On

A vendor script runs as your page, on every page, and the trust chain behind it runs through the vendor's CDN, DNS and credentials. What CSP and Subresource Integrity cover, and what they cost.

intermediate 6 min read

Back to Glossary