Subresource Integrity (SRI) is a security feature that enables browsers to verify that resources they fetch (for example, from a CDN) are delivered without unexpected manipulation. It works by allowing you to provide a cryptographic hash that a fetched resource must match.| MDN Web Docs
Frequently Asked Questions| csp.withgoogle.com
1. Introduction| w3c.github.io
The HTTP Content-Security-Policy response header allows website administrators to control resources the user agent is allowed to load for a given page. With a few exceptions, policies mostly involve specifying server origins and script endpoints. This helps guard against cross-site scripting attacks.| MDN Web Docs
Website with the collection of all the cheat sheets of the project.| cheatsheetseries.owasp.org