Harisecurity widget 0.5.1 /v1/xcap-widget.iife.js latest compatible build (cache 5 min) /0.5.1/xcap-widget.iife.js this exact build (immutable) /0.5.1/sri.json SHA-384 of each script (integrity="sha384-...") /versions.json every version served, with its hashes Serve xcap-worker.js next to the script you load. Documentation: https://docs.harisecurity.com/#/widget-integrity