Skip to content

Instantly share code, notes, and snippets.

@kazu69
Created October 13, 2015 13:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kazu69/40a6d366181e79fbe703 to your computer and use it in GitHub Desktop.
Save kazu69/40a6d366181e79fbe703 to your computer and use it in GitHub Desktop.
Try Subresource_Integrity
wget https://code.jquery.com/jquery-1.11.3.min.js
cat jquery-1.11.3.min.js | openssl dgst -sha256 -binary | openssl enc -base64
7LkWEzqTdpEfELxcZZlS6wAx5Ff13zZ83lYO2/ujj7g=
Failed to find a valid digest in the 'integrity' attribute for resource 'https://code.jquery.com/jquery-1.11.3.min.js' with computed SHA-256 integrity '7LkWEzqTdpEfELxcZZlS6wAx5Ff13zZ83lYO2/ujj7g='. The resource has been blocked.
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SRI</title>
<script src="https://code.jquery.com/jquery-1.11.3.min.js" integrity="sha256-7LkWEzqTdpEfELxcZZlS6wAx5Ff13zZ83lYO2/ujj7g=" crossorigin="anonymous"></script>
<script>window.jQuery || document.write('<script src="js/vendor/jquery-1.11.3.min.js"><\/script>')</script>
</head>
<body>
</body>
</html>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SRI</title>
<script src="https://code.jquery.com/jquery-1.11.3.min.js" integrity="sha256-7LkWEzqTdpEfELxcZZlS6wAx5Ff13zZ83lYO2/ujj7g=" crossorigin="anonymous"></script>
</head>
<body>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment