subresource-integrity
Safeguard articles tagged "subresource-integrity" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Your Tag Manager Is a Second Deployment Pipeline With No Engineer In It
Engineering has code review, CI and branch protection. Marketing can execute arbitrary JavaScript on every page including checkout, by clicking publish. Nobody designed it that way.
Subresource integrity bypass explained
SRI hashes can't stop what happens before the hash is made. How polyfill.io, British Airways, and event-stream exposed real gaps in browser integrity checks.
Subresource Integrity (SRI) Explained (2026)
Subresource Integrity pins a cryptographic hash to every script you load from a CDN, so a compromised CDN cannot silently swap in malicious code. Here is how it works and where it stops.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.