SRIWatch ์ ์์: jaytank_dev
Flags script and stylesheet tags loaded from a CDN with no Subresource Integrity protection, on any page you're auditing.
์คํ์ ์คํ์
์ผ๋ถ ๊ธฐ๋ฅ์ ๊ฒฐ์ ๊ฐ ํ์ํ ์ ์์์ผ๋ถ ๊ธฐ๋ฅ์ ๊ฒฐ์ ๊ฐ ํ์ํ ์ ์์
Androidโข์ฉ Firefox์์ ์ฌ์ฉ ๊ฐ๋ฅAndroidโข์ฉ Firefox์์ ์ฌ์ฉ ๊ฐ๋ฅ
Android์ฉ Firefox์์ ์ด ํ์ฅ ๊ธฐ๋ฅ์ ์ด๋ ค๋ฉด QR ์ฝ๋๋ฅผ ์ค์บํ์ธ์
ํ์ฅ ๋ฉํ ๋ฐ์ดํฐ
์ ๋ณด
If a third-party CDN is ever compromised, a page without Subresource Integrity (SRI) protection will run the tampered script anyway โ a well-documented supply-chain risk, but no standalone extension was found dedicated to flagging it while browsing.
Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium โ this common mistake silently defeats SRI protection), and shows the results in the popup.
--> What it doesn't do:
- Makes zero network requests โ reads only tags already present in the current page's HTML
- Runs only when you click the icon โ no passive/background monitoring, no standing access to any site
Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium โ this common mistake silently defeats SRI protection), and shows the results in the popup.
--> What it doesn't do:
- Makes zero network requests โ reads only tags already present in the current page's HTML
- Runs only when you click the icon โ no passive/background monitoring, no standing access to any site
๋ฆฌ๋ทฐ์ด 0๋ช
์ด 0์ ์ผ๋ก ํ๊ฐํจ
๊ถํ ๋ฐ ๋ฐ์ดํฐ
๋ฐ์ดํฐ ์์ง:
- ๊ฐ๋ฐ์๋ ์ด ํ์ฅ ๊ธฐ๋ฅ์ด ๋ฐ์ดํฐ ์์ง์ ์๊ตฌํ์ง ์๋๋ค๊ณ ๋ฐํ๊ณ ์์ต๋๋ค.
์ถ๊ฐ ์ ๋ณด
- ๋ถ๊ฐ ๊ธฐ๋ฅ ๋งํฌ
- ๋ฒ์
- 0.1.0
- ํฌ๊ธฐ
- 31.74 KB
- ์ต๊ทผ ์ ๋ฐ์ดํธ
- 10์ผ ์ (2026๋ 9์ 21์ผ)
- ๊ด๋ จ ์นดํ ๊ณ ๋ฆฌ
- ๋ผ์ด์ ์ค
- MIT ๋ผ์ด์ ์ค
- ๊ฐ์ธ์ ๋ณด์ฒ๋ฆฌ๋ฐฉ์นจ
- ์ด ๋ถ๊ฐ ๊ธฐ๋ฅ์ ๋ํ ๊ฐ์ธ์ ๋ณด์ฒ๋ฆฌ๋ฐฉ์นจ ์ฝ๊ธฐ
- ๋ฒ์ ๋ชฉ๋ก
- ๋ชจ์์ง์ ์ถ๊ฐ