SRIWatch Autor: jaytank_dev

Flags script and stylesheet tags loaded from a CDN with no Subresource Integrity protection, on any page you're auditing.

Eksperimentalno

Neke funkcije mogu zahtijevati plaćanje

Dostupno u Firefoxu za Android™

0 (0 recenzije)

Preuzmi Firefox i nabavi proširenje

Preuzmi datoteku

Skeniraj QR kod za otvaranje ovog proširenja u Firefoxu za Android

Informacije o ovom proširenju

If a third-party CDN is ever compromised, a page without Subresource Integrity (SRI) protection will run the tampered script anyway — a well-documented supply-chain risk, but no standalone extension was found dedicated to flagging it while browsing.

Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium — this common mistake silently defeats SRI protection), and shows the results in the popup.

--> What it doesn't do:
- Makes zero network requests — reads only tags already present in the current page's HTML
- Runs only when you click the icon — no passive/background monitoring, no standing access to any site

Ocjena 0 od 0 recenzenta

Prikupljanje podataka: