Which mechanism prevents the browser from executing a script if its integrity hash does not match the fetched content?

Question

Web Development — Hard

Which mechanism prevents the browser from executing a script if its integrity hash does not match the fetched content?

Accepted Answer

Subresource Integrity (SRI) allows browsers to verify that resources fetched from CDNs have not been manipulated by checking a cryptographic hash. If the hash of the downloaded file does not match the integrity attribute, the browser refuses to execute the script. CSP is a broader security layer that restricts sources, but it does not perform file-level integrity verification. CORP and HSTS handle resource sharing and connection security, respectively, rather than file content validation.