subresource integrity

/sub-REE-sors in-TEG-rih-tee/ · noun · Security & Infosec · Origin: 2016

Definitions

  1. A browser security feature that verifies external resources (scripts, stylesheets) haven't been tampered with by comparing their content against a cryptographic hash specified in the HTML tag's integrity attribute. SRI protects against CDN compromises and supply chain attacks — if the file's hash doesn't match, the browser refuses to execute it.

    In plain English: A security feature that checks downloaded files against a fingerprint to make sure they haven't been tampered with — if someone hacks the CDN, your site is still safe.

    Example: When the CDN was compromised and started serving a cryptominer in jQuery, sites using subresource integrity were unaffected — their browsers refused to load the modified file.

Related Terms