Your browser does not support / has not enabled WAICT
Your browser does not support / has not enabled WAICT
Enforce mode blocks all resources in blocked-destinations whose hash does not match the manifest, and generates an integrity violation report for each.
Header: Integrity-Policy-WAICT-v1: manifest="/waict-manifest.json", blocked-destinations=(image script), mode=enforce, max-age=0, endpoints=(default)
/waict-manifest.jsonLoading...
| Resource | Expected | Result |
|---|---|---|
| correct.webp | Loaded |
...
|
| incorrect.webp | Blocked |
...
|
| correct.js | Executed | ... |
| incorrect.js | Not executed | Not executed |
The manifest is validated before each resource load — if the manifest is invalid (e.g. contains a malformed hash), none of the resources in blocked-destinations will be available.
Captured via ReportingObserver. Requires dom.reporting.enabled in about:config.
