https://nalar.dev/tags/subresource-integrity/ Recent content in Subresource Integrity on Nalar Hugo en-us Thu, 10 Sep 2026 00:00:00 +0700 https://nalar.dev/pin-third-party-browser-assets-with-subresource-integrity/ Thu, 10 Sep 2026 00:00:00 +0700 https://nalar.dev/pin-third-party-browser-assets-with-subresource-integrity/ <p>Loading JavaScript directly from another organisation&rsquo;s server creates a security dependency that is easy to overlook. Your page may contain only a short <code>&lt;script&gt;</code> tag, but the downloaded file executes with the privileges that your site gives that script. If the file at that URL changes unexpectedly, your users can receive code you never reviewed or deployed.</p> <p>Subresource Integrity (SRI) gives the browser an expected cryptographic hash for a fetched resource. The browser hashes the bytes it receives and loads the resource only when the result matches the declared value. That turns “load whatever this URL serves” into “load the specific content I approved from this URL.”</p>