Add support for subresource integrity in imported module scripts

[yoavweiss]

Proposal

SRI support for ES module imports would enable using them in documents that require SRI for certain scripts for security or privacy reasons.

See problem statement and proposal by @guybedford.

HTML PR
Chromium CL + tests

Browser support

The feature is currently being prototyped in Chromium.

Tasks

• Add an "integrity" section to https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script/type/importmap
• Add an appropriate subsection to the JSON representation section

Dependencies

• HTML PR

Additional information

No response

Are you willing to support this work?

Yes