As of April 2026, Auto SRI is a WordPress csp plugin with 300 active installations and a 0/5 rating0. It has been downloaded 869 times in total. Requires WordPress 5.0+ and PHP false+. Available on WordPress.org since 2025. Top alternative: Headers Security Advanced & HSTS WP.
0/5Rating
300active installs
869total downloads
1 yearsince 2025
Overview
Auto SRI automatically adds Subresource Integrity (SRI) attributes to scripts and styles loaded from external sources.
This improves security, protects against tampering, and enables strict Content Security Policy (CSP) setups.
Features
- ✔ Adds SRI to all external
<script>and<link>tags - ✔ Supports WordPress-enqueued assets and raw HTML tags
- ✔ Supports async, defer, crossorigin, and multiline script tags
- ✔ Caches all hashes for performance
- ✔ Excludes admin panel (wp-admin) to prevent conflicts
- ✔ Automatically skips non-SRI-compatible providers:
- Google reCAPTCHA
- Google Fonts (fonts.googleapis.com / fonts.gstatic.com)
- WordPress.com widgets (widgets.wp.com)
- Dynamic concatenated resources
- Dynamic script loaders and runtime-inserted scripts
- ✔ Safe for Elementor, W…
Ratings & Reviews
00 reviews
5 ★
0
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 5.0+ requiredTested up to 6.8.5 |
| PHP | false+ required |
Top Alternatives to Auto SRI
Frequently Asked Questions
Changelog
2.1
- Improved settings page UX with clearer instructions
- Added “Settings” link to the plugin action links on the plugins page
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.