# Using SRI for ES6 module import?

**URL:** https://discourse.mozilla.org/t/using-sri-for-es6-module-import/33749
**Category:** Firefox Development
**Tags:** privacysecurity
**Created:** [November 26, 2018, 7:58am UTC](https://discourse.mozilla.org/t/using-sri-for-es6-module-import/33749 "2018-11-26T07:58:10Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![rugkx](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/rugkx/32/19322_2.png) [@rugkx](https://discourse.mozilla.org/u/rugkx)
#### Post date: [November 26, 2018, 7:58am UTC](https://discourse.mozilla.org/t/using-sri-for-es6-module-import/33749/1 "2018-11-26T07:58:10Z")

</div>

Are there any ideas to add a way to add [Subresource Integrity](https://developer.mozilla.org/docs/Web/Security/Subresource_Integrity) for [ES6 modules, so you can import](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/import) a JS module and ensure its integrity?

IMHO it is very important to preserve that new security feature for this new loading method.

Also asked [on Stackoverflow](https://stackoverflow.com/questions/53476946/subresource-integrity-for-es6-module-import).

---

<div class="post-metadata">

### Author: ![jens1o](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/jens1o/32/19376_2.png) [@jens1o](https://discourse.mozilla.org/u/jens1o)
#### Post date: [November 26, 2018, 5:06pm UTC](https://discourse.mozilla.org/t/using-sri-for-es6-module-import/33749/2 "2018-11-26T17:06:15Z")

</div>

I already asked that over a year ago: [https://stackoverflow.com/questions/45804660/is-it-possible-to-use-subresource-integrity-with-es6-module-imports](https://stackoverflow.com/questions/45804660/is-it-possible-to-use-subresource-integrity-with-es6-module-imports)