Running on your device · 0 bytes uploaded
Subresource integrity hash
Hash a script or style into an integrity= attribute — text or file, sha256/384/512 — and inspect an existing attribute. The hash is computed locally; the file never uploads.
Used only to build the ready-to-paste tag.
- It cannot fetch the URL to verify the served bytes still match — paste the actual file, or hash the served script yourself.
- integrity on same-origin files is pointless (you already control them); it protects third-party CDNs.
- crossorigin=anonymous is usually needed alongside integrity for CORS-fetched subresources.
Nothing in yet
Paste, drop, or type to begin. Everything stays on this device.
paste text or pick a file, then hash