As a system administrator, I want the portal to automatically add SRI hash when using a CDN

• Type: Story
• Status: Open
• Priority: Trivial
• Resolution: Unresolved
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security
• Labels:
  • out-of-scope

Whenever the portal is loading resources from a CDN (or any other 3rd party server), there is a risk that the CDN might get compromised. To mitigate against this type of attack, the portal should automatically add Subresource Integrity (SRI) hashes to <script> and <link> elements when using a CDN.

Reference: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

Supported by majority of browsers since 2018: https://caniuse.com/subresource-integrity