← Back to release summary

Subresource Integrity

Category
Security
Type
New or changed feature
Status
Enabled by default (Chrome 45)
Intent stage
None

Summary

Subresource Integrity defines a mechanism by which user agents may verify that a fetched resource has been delivered without unexpected manipulation. In a nutshell, metadata inlined into HTML elements allows the browser to determine whether the resource that was downloaded matches the resource the page's author expected to download. This implementation covers only the two elements outlined in the spec: <script> and <link rel="stylesheet"> elements.

Standards & signals

Docs: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/link https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script https://developer.mozilla.org/en-US/docs/Web/API/Request

Samples: https://googlechrome.github.io/samples/subresource-integrity/index.html

View on chromestatus.com