Securing Third-party Web Resources Using Subresource Integrity Automation

Abstract

Using Content Delivery Networks (CDNs) to host files such as scripts and stylesheets that are shared among multiple sites can improve site performance and conserve bandwidth. However, using CDNs also comes with a risk, in that if an attacker gains control of a CDN, the attacker can inject arbitrary malicious content into files on the CDN and thus can
also potentially attack all sites that fetch files from that CDN. Internet security and its awareness is an often discussed topic these days. The diversity and the potential of current web browser applications has highly increased in the last years. With this, the way of how security of such web pages is rated to the users has changed as well. In order to avoid cross scripting attacks we need to authenticate resources that we are fetching from CDN.
This work especially address these cross scripting attacks and measures to avoid it. The Subresource Integrity feature that is announced as W3C recommendation on the 23rd of June 2016 is not still implemented by major portion of user. This work makes it easier for even novice user to use SRI mechanism to protect himself/herself from different kinds of security breaches.