Frontend & browser·Browser security
the script tag carries a hash and the browser refuses to run the file if it does not match.
Subresource integrity
Also calledSRI, integrity attribute
A hash on a script or stylesheet tag that the browser verifies before executing the fetched file. It is the defence against a CDN or a third-party host serving something other than what you expected. It only works for files that never change, so a versioned library URL can use it and a rolling `latest` URL cannot.