http://simonwillison.net/2017-10-18T21:05:16+00:00Simon Willison2017-10-18T21:05:16+00:002017-10-18T21:05:16+00:00https://simonwillison.net/2017/Oct/18/sri-hash-generator/#atom-tag

<p><strong><a href="https://www.srihash.org/">SRI Hash Generator</a></strong></p> Handy utility for generating SRI hashes—just give it a URL and it will show you the script or link href block you need to use to safely embed that URL in your page with the correct SRI hash. <p>Tags: <a href="https://simonwillison.net/tags/sri">sri</a></p>

2017-10-18T21:03:04+00:002017-10-18T21:03:04+00:00https://simonwillison.net/2017/Oct/18/sri/#atom-tag

<p><strong><a href="https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity">Subresource Integrity</a></strong></p> Now supported in Firefox 55, Chrome 49+ and Safari 11+. This makes me much more comfortable about hot-linking to JavaScript and CSS hosted by the various CDN providers, since it means that should they get breached any evil new scripts hosted at the same URL will be denied by modern browsers. <p>Tags: <a href="https://simonwillison.net/tags/firefox">firefox</a>, <a href="https://simonwillison.net/tags/sri">sri</a></p>