Signature-based resource integrity

Signature-based resource integrity verifies a script's provenance by checking that the resource has been signed with a trusted key given by the <script> element's integrity attribute.

Baseline Status: This feature is currently Limited and is missing in at least one major browser engine.

Desktop Browser Engine Support

Google Chrome

141

Supported

Mozilla Firefox

—

Unsupported

Apple Safari

—

Unsupported

Microsoft Edge

141

Supported

Mobile Browser Engine Support

Chrome Android

141

Firefox Android

—

Safari iOS

—

Specifications and References

Specification ↗ Feature XML ↗

MDN Browser Compat Data Keys:

html.elements.script.integrity.ed25519_public_key ↗ http.headers.Signature ↗ http.headers.Signature-Input ↗ http.headers.Unencoded-Digest ↗