Subresource Integrity

Target entity: Subresource Integrity
Context triple: [Chrome Web Platform features, includesAPI, Subresource Integrity]

• A. Content Security Policy
  Content Security Policy is a web security standard that allows site owners to control which resources a browser is permitted to load and execute, helping to mitigate attacks like cross-site scripting and data injection.
• B. Same-Origin Policy
  The Same-Origin Policy is a fundamental web security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another, helping prevent malicious cross-site attacks.
• C. Chrome security policies
  Chrome security policies are a set of rules and configurations that govern how the Google Chrome browser protects users, data, and web content from security threats.
• D. HTTP Strict Transport Security specification
  The HTTP Strict Transport Security specification is a web security standard that allows servers to enforce secure (HTTPS) connections by instructing browsers to refuse insecure HTTP access to a site.
• E. CSP
  CSP is a web security standard that helps prevent attacks like cross-site scripting (XSS) by controlling which resources a browser is allowed to load for a given page.
• F. None of above. chosen
• G. Unsure - the case is ambiguous/there is not enough information to decide.

Target entity: Subresource Integrity
Target entity description: Subresource Integrity is a web security feature that allows browsers to verify that fetched resources (like scripts or stylesheets) have not been tampered with by checking their cryptographic hashes.

• A. Content Security Policy
  Content Security Policy is a web security standard that allows site owners to control which resources a browser is permitted to load and execute, helping to mitigate attacks like cross-site scripting and data injection.
• B. Same-Origin Policy
  The Same-Origin Policy is a fundamental web security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another, helping prevent malicious cross-site attacks.
• C. Chrome security policies
  Chrome security policies are a set of rules and configurations that govern how the Google Chrome browser protects users, data, and web content from security threats.
• D. HTTP Strict Transport Security specification
  The HTTP Strict Transport Security specification is a web security standard that allows servers to enforce secure (HTTPS) connections by instructing browsers to refuse insecure HTTP access to a site.
• E. CSP
  CSP is the commonly used abbreviation for the Conference of the States Parties, the main decision-making body overseeing implementation of the Chemical Weapons Convention.
• F. None of above. chosen