Matan · Security · Content
Subresource Integrity
SRI (integrity=) detects CDN tampering on third-party scripts.
Pass condition in our engine: Cross-origin scripts include an integrity attribute, or none are used.
1. Problem description
If you load jQuery from a CDN and the CDN is compromised, SRI blocks the hash mismatch. Same-origin bundles do not need SRI. We flag cross-origin <script src> without integrity.
2. Most common causes
- CDN snippets without integrity.
- Frequently changing analytics scripts (harder to pin — host them yourself or accept the risk).
3. How to fix it
- Add integrity and crossorigin="anonymous" on stable CDN libraries.
- Pin versions; do not use @latest URLs.
- Self-host critical JS when hashes would churn daily.
Test this check
We fetch only this URL (plus robots.txt / llms.txt at the domain root when the check needs them). We do not crawl the rest of the site like a full report.
Scoring rules for the full site crawl are documented in methodology. Want every category at once? Generate a free report.
Get your free SEO & GEO report
Enter your URL and receive a full audit with scoring and recommendations. No sign-up required.