The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Auto SRI
Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.
The facts
- Active installs
- 500+
- Price
- Free
- Last updated
- 13 Apr 2026
- Added
- Dec 2025
- Requires WP
- 5.0
- Tested up to
- WP 6.8.8
- Downloads
- 2,457
Our analysis
AI-assistedAuto SRI is a WordPress plugin that automatically adds Subresource Integrity (SRI) attributes to scripts and styles loaded from external sources. This enhances security by protecting against tampering and supports strict Content Security Policy (CSP) setups. The plugin is designed to improve performance by caching hashes and excluding the admin panel to avoid conflicts.
It supports WordPress-enqueued assets as well as raw HTML tags, and can handle various script tag attributes such as async, defer, and crossorigin. However, it automatically excludes certain providers like Google reCAPTCHA and Google Fonts to prevent issues with integrity mismatches and layout shifts.
Best for: This plugin suits WordPress users looking to enhance security and performance for external scripts and styles.
What it does well
- ✓Automatically adds SRI attributes to external scripts and styles
- ✓Supports both WordPress-enqueued assets and raw HTML tags
- ✓Caches all hashes for improved performance
- ✓Excludes admin panel to prevent conflicts
- ✓Automatically skips non-SRI-compatible providers
Where it falls short
- •Excludes certain popular services like Google Fonts and reCAPTCHA
- •Limited information on user ratings and feedback
Verdict
Auto SRI provides a straightforward solution for adding SRI attributes, though its exclusions may limit its use with some common services.
From the developer
zfir's own description of Auto SRI, lightly tidied.
Auto SRI automatically adds Subresource Integrity (SRI) attributes to scripts and styles loaded from external sources.
This improves security, protects against tampering, and enables strict Content Security Policy (CSP) setups.
Features
- ✔ Adds SRI to all external
<script>and<link>tags - ✔ Supports WordPress-enqueued assets and raw HTML tags
- ✔ Supports async, defer, crossorigin, and multiline script tags
- ✔ Caches all hashes for performance
- ✔ Excludes admin panel (wp-admin) to prevent conflicts
- ✔ Automatically skips non-SRI-compatible providers:
- Google reCAPTCHA
- Google Fonts (fonts.googleapis.com / fonts.gstatic.com)
- WordPress.com widgets (widgets.wp.com)
- Dynamic concatenated resources
- Dynamic script loaders and runtime-inserted scripts
Why some scripts are excluded
This plugin automatically excludes:
- Google reCAPTCHA (
google.com/recaptcha) - Google Fonts stylesheets (
fonts.googleapis.com) - Google Fonts font files (
fonts.gstatic.com) - WordPress.com widgets (
widgets.wp.com) - Dynamic concatenated resources (
/_static/??) - Other dynamic inline loaders (CookieYes, wsimg, ywxi, etc.)
Want to whitelist a dynamic provider? Contact us at izafirsk@gmail.com.
* Other dynamic inline loaders (CookieYes, wsimg, ywxi, etc.)Want to whitelist a dynamic provider? Contact us at izafirsk@gmail.com.
These exclusions prevent:
- CORS failures
- Integrity mismatch blocking
- Google reCAPTCHA from breaking
- Google Fonts from disappearing
- Layout shifts caused by blocked assets
Tagged as
Alternatives
Other plugins for stopping spam.
Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...
Free
1M+ installs 4.7★ (280)
Antispam Bee
92Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...
Free
700k+ installs 4.8★ (226)
Top-rated antispam for contact forms, comments, WooCommerce, eCommerce, and login. No CAPTCHAs, no friction, j...
Free
200k+ installs 4.8★ (3,208)
Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1
Free
200k+ installs 5★ (89)
Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
Free
200k+ installs 4.8★ (430)