SRI Check
Summary: PortSwigger's BApp Store lists SRI Check, a Burp Suite extension by Solomon Sklash at version 1.4.0, last updated 12 July 2019, that identifies missing Subresource Integrity attributes. The listing rates its overall system impact as Low and notes that extensions are written by third-party Burp users, with PortSwigger making no warranty about their quality or usefulness.
Why it matters: Missing Subresource Integrity attributes leave third-party scripts free to run unchecked if a CDN or host is compromised, and this tool for finding them has sat unupdated since July 2019 - so the gap it flags may be one your own scanning never covers.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026