– SRI Hash Website Scanner

Subresource Integrity (SRI) is a way to secure external dependencies of web pages. From Mozilla’s technical page:

You use the Subresource Integrity feature by specifying a base64-encoded cryptographic hash of a resource (file) you’re telling the browser to fetch, in the value of the integrity attribute of any <script> or <link> element.

An integrity value begins with at least one string, with each string including a prefix indicating a particular hash algorithm (currently the allowed prefixes are sha256sha384, and sha512), followed by a dash, and ending with the actual base64-encoded hash.

An integrity value may contain multiple hashes separated by whitespace. A resource will be loaded if it matches one of those hashes.

Supported in Chrome 45+, Firefox 43+, recently (2017-05-09) in Safari but “UNDER CONSIDERATION” in Edge since August 06, 2014.

More on this subject here.

Online scanner: – SRI Hash Website Scanner

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s