Like any feature, there's a lot of weird edge casey parts of SRI that can be abused. We blogged about Adblock detectors over here[1] a couple of months ago for

Like any feature, there's a lot of weird edge casey parts of SRI that can be abused. We blogged about Adblock detectors over here[1] a couple of months ago for BugReplay[2]. A major Adblock detector FAdBlock was using subresource integrity to detect whether it's payload was being blocked, ie when adblocker was blocking it from being loaded. [1]: https://blog.bugreplay.com/2016/11/fkadblock-how-publishers-are-defeating.html https://blog.bugreplay.com/2016/11/fkadblock-how-publishers-... [2]: https://www.bugreplay.com https://www.bugreplay.com