…...integrity

= a hash value, like a checksum

Subresource Integrity (SI) ensures that resources on a site have not been tampered with, which may be especially important when using a CDN. It can be generated with OpenSSL:

openssl dgst -sha384 -binary FILENAME.js | openssl base64 -A

...or at the site: https://www.srihash.org/>

Here is an example which requests Bootstrap CDN:

<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js"
        integrity="sha384-vBWWzlZJ8ea9aCX4pEW3rVHjgjt7zpkNpZk+02D9phzyeVkE+jo0ieGizqPLForn"
        crossorigin="anonymous"></script>

This attribute is valid on the elements <script>, and <link>.

MENU

…...integrity