Page Security
Subresource integrity check
Whether scripts your site loads from other companies' servers carry a fingerprint, so a tampered copy is refused.
Check this on your own domain now. It is free with a DomainGuard account, reads only public records, and gives you a report you can send to whoever runs your website.
What we look at
We list the scripts your homepage loads from other domains and check each for an integrity hash.
Why it matters to your business
When your site loads a script from a CDN or vendor, you are trusting that server with your visitors' browsers. If it is compromised, the altered script runs on your site too. An integrity hash makes the browser refuse any copy that does not match.
How to fix it
- Add integrity="sha384-…" and crossorigin="anonymous" to third-party script tags that load a fixed version.
- Host small scripts yourself instead of loading them from someone else's server.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.
