Enforce mode blocks all resources in blocked-destinations which are not covered in the manifest, and generates an integrity violation report for each.
Header: Integrity-Policy-WAICT-v1: manifest="/waict-manifest.json", blocked-destinations=(image script), mode=enforce, max-age=0, endpoints=(default)
/waict-manifest.jsonLoading...
| Resource | Expected | Result |
|---|---|---|
| correct.js | Executed | ... |
| incorrect.js | Not executed | Not executed |
| missing.js | Not executed | Not executed |
The manifest is validated before each resource load — if the manifest is invalid (e.g. contains a malformed hash), none of the resources in blocked-destinations will be available.
Captured via ReportingObserver.