How we built it

Subresource Integrity

Subresource Integrity defines a mechanism by which user agents may verify that a fetched resource has been delivered without unexpected manipulation. In a nutshell, metadata inlined into HTML elements allows the browser to determine whether the resource that was downloaded matches the resource the page's author expected to download. This implementation covers only the two elements outlined in the spec: <script> and <link rel="stylesheet"> elements.




Working draft or equivalent

Status in Chromium

Enabled by default (launch bug) in:

  • Chrome for desktop release 45
  • Chrome for Android release 45
  • Chrome for iOS release 45
  • Android WebView release 45

Consensus & Standardization

  • Shipped
  • No public signals
  • No public signals
  • Positive


Last updated on 2015-11-16