SRIWatch door jaytank_dev

If a third-party CDN is ever compromised, a page without Subresource Integrity (SRI) protection will run the tampered script anyway — a well-documented supply-chain risk, but no standalone extension was found dedicated to flagging it while browsing.

Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium — this common mistake silently defeats SRI protection), and shows the results in the popup.

--> What it doesn't do:
- Makes zero network requests — reads only tags already present in the current page's HTML
- Runs only when you click the icon — no passive/background monitoring, no standing access to any site