Website · Fix guide
Subresource Integrity coverage
- SRI
- Subresource Integrity
Cross-origin scripts or stylesheets may load without an integrity hash.
What does this test measure?
Cross-origin scripts or stylesheets may load without an integrity hash.
What to do next
- Add integrity hashes to stable third-party scripts and styles.
- Use crossorigin where the resource requires it.
- Update hashes whenever the resource contents change.
How to verify the fix
Reload the page and confirm protected resources load without integrity errors.
When this result may be wrong
SRI is unsuitable for resources whose contents change at the same URL, and first-party resources do not normally require it.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.