---
title: "Discussion on \"Subresource Integrity (SRI): Pin Your CDN Scripts\" | Hashnode"
description: "Discussion on \"Subresource Integrity (SRI): Pin Your CDN Scripts\". Every <script src=\"https://cdn...\"> on your site is a standing grant of full JavaScript execution to whoever controls that file tomorrow. Not the file you reviewed, the file the CDN serves on the next"
url: "https://hashnode.com/posts/subresource-integrity-sri-pin-your-cdn-scripts/6aee206a086af0be7468005a"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Subresource Integrity (SRI): Pin Your CDN Scripts](https://resume-ai.hashnode.dev/subresource-integrity-sri-pin-your-cdn-scripts?utm_source=hashnode&utm_medium=feed)

Every <script src="https://cdn..."> on your site is a standing grant of full JavaScript execution to whoever controls that file tomorrow. Not the file you reviewed, the file the CDN serves on the next

5d ago · 9 min read · resume-ai.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#web-development](https://hashnode.com/tag/web-development)
-   [#javascript](https://hashnode.com/tag/javascript)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#supply-chain-security](https://hashnode.com/tag/supply-chain-security)

## Written by

[Muhammad Ali Mughal](https://hashnode.com/@ali978123)

@ali978123

  
[View profile](https://hashnode.com/@ali978123)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.