Script tags with integrity attributes

This tutorial explains what the integrity attribute of a script tag is and how it works. Also covered is how you can integrate your integrity values into your Content Security Policy meta tags.

[nelsyeung]

Seriously?! This is only 1k views? This video is the only resource I've found on these two concepts that is quick and easy to understand without jargons.

[jonmultimedia]

Really good video. Just got a security hotspot with Sonar Cube in the pipeline complaining about missing integrity. This explains it really well. Thank you :)

[ApteacherNetTelanganaTeachers]

Super Steve Bro... Nice explained.. Thq.... I searched on internet.. i got ur video....Thx a lot ...

[smiran]

This is a great video. Also, when you get the sha384 of the SRI Hash generator, make sure to add the crossorigin="anonymous"; otherwise, you will still get an error.

[ritaahmed]

Thanks. You made my task easy to understand!

[justingilley]

Please keep making videos; you should have more subscribers because your content is actually useful. Unfortunately, content creators without substance get the most attention.

[mazheradvise]

Can you please share it for nonce i am able to generate the unique nonce value but couldn't able to call in my html and jsp page

[victorpinasarnault]

I try copy and paste the sha384 of the SRI Hash generator and not just didn't work as screw up my website design. What happened?

[m]

Great stuff as usual… just wondering if you’d need a modified approach for a site developed with something like Svelte and Sveltekit?

[somebody]

Amazing video, can we use the script-src 'hash' for inline scripts?

[netanel]

amazing video! thank you very much sir

[makeitbollywood]

Can we use it for any cdn which is not providing the integrity attributes. ??

[meghrajsingh]

Hi Steve, I might be late for it but my page have many inline scripts and styles that's an old code and making all the script as a link is not easy and also adding so many hash code in every script is also not that easy is there any solution for it

[rajastylez]

How do you stop a chicken and egg problem of knowing when you MAKE the tag that it's not malicious lol?

[koro]

Anyway to skip the integrity attribute