Skip to content

Integrity checks break Decentraleyes (when contents don't match)

I noticed this while investigating why a site was broken, where I noticed that Decentraleyes' jQuery wasn't loaded because of a checksum mismatch. I took the liberty to compare jQuery versions between Decentraleyes, jQuery CDN, and cdnjs:

jQuery CDN mismatches with Decentraleyes
  • 1.10.0
  • 1.10.1
  • 1.10.2
  • 1.2.3
  • 1.2.6
  • 1.6.4
  • 1.9.0
  • 1.9.1
  • 2.0.0
  • 2.0.1
  • 2.0.2
  • 2.0.3
cdnjs mismatches with Decentraleyes
  • 1.10.0
  • 1.10.1
  • 1.10.2
  • 1.11.2
  • 1.11.3
  • 1.2.3
  • 1.2.6
  • 1.6.2
  • 1.6.4
  • 1.8.0
  • 1.8.1
  • 1.8.2
  • 1.9.0
  • 1.9.1
  • 2.0.0
  • 2.0.1
  • 2.0.2
  • 2.0.3
  • 2.1.1
  • 2.1.3
  • 2.1.4
jQuery CDN mismatches with cdnjs
  • 1.10.0
  • 1.10.1
  • 1.10.2
  • 1.11.2
  • 1.11.3
  • 1.6.2
  • 1.8.0
  • 1.8.1
  • 1.8.2
  • 2.0.1
  • 2.0.2
  • 2.0.3
  • 2.1.1
  • 2.1.3
  • 2.1.4

Most of the time the difference is a date or the inclusion of a sourceMappingURL.

I haven't checked any other libraries.

Edit: Just in case: this is about Subresource Integrity checksums.

Edited by Willem Mulder