Integrity checks break Decentraleyes (when contents don't match)
I noticed this while investigating why a site was broken, where I noticed that Decentraleyes' jQuery wasn't loaded because of a checksum mismatch. I took the liberty to compare jQuery versions between Decentraleyes, jQuery CDN, and cdnjs:
jQuery CDN mismatches with Decentraleyes
- 1.10.0
- 1.10.1
- 1.10.2
- 1.2.3
- 1.2.6
- 1.6.4
- 1.9.0
- 1.9.1
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
cdnjs mismatches with Decentraleyes
- 1.10.0
- 1.10.1
- 1.10.2
- 1.11.2
- 1.11.3
- 1.2.3
- 1.2.6
- 1.6.2
- 1.6.4
- 1.8.0
- 1.8.1
- 1.8.2
- 1.9.0
- 1.9.1
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.1.1
- 2.1.3
- 2.1.4
jQuery CDN mismatches with cdnjs
- 1.10.0
- 1.10.1
- 1.10.2
- 1.11.2
- 1.11.3
- 1.6.2
- 1.8.0
- 1.8.1
- 1.8.2
- 2.0.1
- 2.0.2
- 2.0.3
- 2.1.1
- 2.1.3
- 2.1.4
Most of the time the difference is a date or the inclusion of a sourceMappingURL.
I haven't checked any other libraries.
Edit: Just in case: this is about Subresource Integrity checksums.
Edited by Willem Mulder