SRIWatch by jaytank_dev

Flags script and stylesheet tags loaded from a CDN with no Subresource Integrity protection, on any page you're auditing.

Experimental

Some features may require payment

Available on Firefox for Android™

0 (0 reviews)

Download Firefox and get the extension

Download file

Scan the QR code to open this extension in Firefox for Android

About this extension

If a third-party CDN is ever compromised, a page without Subresource Integrity (SRI) protection will run the tampered script anyway — a well-documented supply-chain risk, but no standalone extension was found dedicated to flagging it while browsing.

Click the toolbar icon on any page to scan it on demand: SRIWatch checks every cross-origin <script>/<link rel="stylesheet"> tag for a missing integrity attribute (high severity) or an integrity present but missing crossorigin (medium — this common mistake silently defeats SRI protection), and shows the results in the popup.

--> What it doesn't do:
- Makes zero network requests — reads only tags already present in the current page's HTML
- Runs only when you click the icon — no passive/background monitoring, no standing access to any site

Rated 0 by 0 reviewers

Data collection: