SRIWatch Autor: jaytank_dev

Flags script and stylesheet tags loaded from a CDN with no Subresource Integrity protection, on any page you're auditing.

Experiment

Použitie niektorých funkcií môže byť spoplatnené

Dostupné pre Firefox pre Android™

0 (počet recenzií: 0)

Stiahnuť Firefox a získať rozšírenie

Stiahnuť súbor

Naskenujte QR kód a otvorte toto rozšírenie vo Firefoxe pre Android

O tomto rozšírení

If a third-party CDN is ever compromised, a page without Subresource Integrity (SRI) protection will run the tampered script anyway — a well-documented supply-chain risk, but no standalone extension was found dedicated to flagging it while browsing.

Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium — this common mistake silently defeats SRI protection), and shows the results in the popup.

--> What it doesn't do:
- Makes zero network requests — reads only tags already present in the current page's HTML
- Runs only when you click the icon — no passive/background monitoring, no standing access to any site

Hodnotené 0 od 0 recenzentov

Zber údajov: