https://nalar.dev/tags/sri/ Recent content in SRI on Nalar Hugo en-us Tue, 15 Sep 2026 00:00:00 +0700 https://nalar.dev/subresource-integrity-pins-external-assets-to-expected-bytes/ Tue, 15 Sep 2026 00:00:00 +0700 https://nalar.dev/subresource-integrity-pins-external-assets-to-expected-bytes/ <h1 id="subresource-integrity-pins-external-assets-to-expected-bytes">Subresource Integrity Pins External Assets to Expected Bytes</h1> <p>A web page can keep all of its application code under careful review and still execute JavaScript delivered from infrastructure outside its control. Analytics libraries, UI frameworks, payment components, and other dependencies are often fetched from a content delivery network. If that remote response changes, the browser normally has no basis for deciding whether the new bytes are an approved release or an unexpected substitution.</p>