Script integrity mismatch only when using Rocket Loader

I’m loading scripts via cdnjs and when I enable Rocket Loader, I’m getting an integrity violation. If I disable Rocket Loader and call it directly, it works fine.

I would think that this is me calling a bad integrity hash, but it only exists when Rocket Loader is on. And seems to only be with CDNJS, but I don’t think I have any other remote scripts with integrity on (will need to look at my source more) Anyone else seeing this?

Here are two examples:

rocket-loader.min.js:1 A preload for ‘https://cdnjs.Cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js’ is found, but is not used due to an integrity mismatch.
t.activateScript @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
t.run @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
load (async)
t.runOnLoad @ rocket-loader.min.js:1
y @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1

Second example:
A preload for ‘https://cdnjs.Cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js’ is found, but is not used due to an integrity mismatch.
t.activateScript @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
t.run @ rocket-loader.min.js:1
b @ rocket-loader.min.js:1
callback @ rocket-loader.min.js:1
t.run @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
load (async)
t.runOnLoad @ rocket-loader.min.js:1
y @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1
(anonymous) @ rocket-loader.min.js:1

Bump? Here’s my implementation which has the correct SRI. I re-copied both the link and SRI to be sure. My links didn’t come through, but these are wrapped in script tags.

src=“https://cdnjs.Cloudflare.com/ajax/libs/vanilla-lazyload/10.19.0/lazyload.min.js
integrity=“sha256-rfA/erh2Ivqne00S+X/4BGY3eVC4BQIaB6jBGATOrBQ=”
crossorigin=“anonymous”
type=“text/javascript”

This topic was automatically closed after 14 days. New replies are no longer allowed.