Google Analytics support for SRI hash?
I'd like to utilize SRI hashing for all of the external resources on my website.
I know between updates to analytics I'd need to update the hash, but I'm not concerned about that. I'd rather it fail the hash check if it varies.
Is this a bug in the SRI spec, SRI implementation, or something else?
Re: Google Analytics support for SRI hash?[ Edited ]
October 2016 - last edited October 2016
The problem with GA is it's 1 script which programmatically downloads other scripts.
So you can check the integrity of the 1st script - without being able to check or control integrity of all the others. Thus defeating the purpose of SRI
SRI has limitations.