SRI: The `require-sri-for` CSP directive. - Chrome Platform Status

A new require-sri-for directive in Content Security Policy gives developers the ability to assert to the browser that every resource of a given type ought to be checked for integrity. If a resource of that type is loaded without integrity metadata, it will be rejected without triggering a network request.