Generate Subresource Integrity hashes for scripts and stylesheets. Protect against CDN compromises.
How to use
.js or .css file (e.g. from jsDelivr, cdnjs, or unpkg)<script> or <link> tagThe CDN resource must have CORS enabled (Access-Control-Allow-Origin: *). SHA-384 is the recommended algorithm.