Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Subresource Integrity (SRI) Manager
Adds Subresource Integrity (SRI) attributes to your page's elements for better protection against JavaScript DDoS attacks.
The facts
- Rating
- 2.9★ from 11
- Active installs
- 900+
- Price
- Free
- Last updated
- 3 Dec 2020
- Added
- Jun 2015
- Requires WP
- 4.1
- Tested up to
- WP 5.6.19
- Downloads
- 18,844
Our analysis
AI-assistedSubresource Integrity (SRI) Manager is a WordPress plugin designed to add Subresource Integrity declarations to third-party content loaded on your site. It automatically detects third-party resources, generates a SHA-256 hash of the content, and modifies your page’s script and link elements to enhance security. This helps ensure that the correct libraries are loaded, potentially reducing the risk of DDoS attacks on your site.
This plugin is suitable for site administrators looking to implement security best practices related to third-party resources. It is particularly aimed at those who want to enhance the integrity of external scripts and stylesheets used in their WordPress sites.
Best for: This plugin suits WordPress site administrators focused on enhancing security for third-party resources.
What it does well
- ✓Free to use from the WordPress.org directory
- ✓Automatically detects and hashes third-party resources
- ✓Modifies script and link elements on-the-fly
- ✓Aims to reduce the likelihood of DDoS attacks
Where it falls short
- •Currently in version 0.4.0, which may indicate limited features
- •Has a relatively low rating of 2.9 out of 5
- •Last updated in December 2020, which may affect compatibility and support
- •Described as somewhat skeletal with requests for further development
Verdict
Subresource Integrity (SRI) Manager provides a specific security function for WordPress sites, but its low rating and limited updates may be a concern for potential users.
From the developer
Meitar's own description of Subresource Integrity (SRI) Manager, lightly tidied.
A WordPress plugin for easily adding a Subresource Integrity (SRI) declaration to any third-party content your pages load. The standards-based integrity attribute is a defense-in-depth best practice currently making its way into browsers. This plugin closely tracks the W3C draft.
Currently, the plugin automatically detects any third-party resources (like JavaScript libraries) and will make a SHA-256 hash of the content. It remembers this hash (until you uninstall the plugin or delete the hash from the admin interface), and modifies your page’s <script> and <link> elements on-the-fly. This way, your visitor’s Web browsers can automatically ensure that the specific library you’re using is the one they’re loading.
Using this plugin can dramatically reduce the liklihood that visitors to your site will be strong-armed into participating in an HTTP DDoS attack. For more information, see “An introduction to JavaScript-based DDoS” by Nick Sullivan.
Future versions of this plugin will also provide an easy-to-use interface for site administrators to maintain a customized list of resource hashes, and to trigger on-demand integrity checks of these resources.
This plugin is still somewhat skeletal. Feature requests and patches are welcome! Please provide a test case with your patch. See the tests subdirectory for unit tests.
If you like this plugin, please consider making a donation for your use of the plugin, or better yet, contributing directly to my’s Cyberbusking fund. Your support is appreciated!
Tagged as
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)