Amit Moreno

<p>Boost your WordPress performance with additional performance settings.</p>
<h4>Installation</h4>
<p>=</p>
<p>Upload the zip file to your wp-content/plugins folder, activate the plugin and go to the plugin settings page to start your settings (Settings > CNR Performance).</p>


CNR Performance

Boost your WordPress performance with additional performance settings.

zfir

<p><strong>Auto SRI</strong> automatically adds Subresource Integrity (SRI) attributes to scripts and styles loaded from external sources.</p>
<p>This improves security, protects against tampering, and enables strict Content Security Policy (CSP) setups.</p>
<h3>Features</h3>
<ul>
<li>✔ Adds SRI to all external <code><script></code> and <code><link></code> tags  </li>
<li>✔ Supports WordPress-enqueued assets and raw HTML tags  </li>
<li>✔ Supports async, defer, crossorigin, and multiline script tags  </li>
<li>✔ Caches all hashes for performance  </li>
<li>✔ Excludes admin panel (wp-admin) to prevent conflicts</li>
<li>✔ Automatically skips non-SRI-compatible providers:
<ul>
<li>Google reCAPTCHA  </li>
<li>Google Fonts (fonts.googleapis.com / fonts.gstatic.com)  </li>
<li>WordPress.com widgets (widgets.wp.com)</li>
<li>Dynamic concatenated resources</li>
<li>Dynamic script loaders and runtime-inserted scripts  </li>
</ul>
</li>
<li>✔ Safe for Elementor, WooCommerce, CookieYes, Jetpack, GoDaddy hosting, etc.</li>
</ul>
<h3>Why some scripts are excluded</h3>
<p>This plugin automatically excludes:</p>
<ul>
<li>Google reCAPTCHA (<code>google.com/recaptcha</code>)  </li>
<li>Google Fonts stylesheets (<code>fonts.googleapis.com</code>)  </li>
<li>Google Fonts font files (<code>fonts.gstatic.com</code>)  </li>
<li>WordPress.com widgets (<code>widgets.wp.com</code>)</li>
<li>Dynamic concatenated resources (<code>/_static/??</code>)</li>
<li>Other dynamic inline loaders (CookieYes, wsimg, ywxi, etc.)</li>
</ul>
<p>Want to whitelist a dynamic provider? Contact us at izafirsk@gmail.com.<br />
* Other dynamic inline loaders (CookieYes, wsimg, ywxi, etc.)</p>
<p>Want to whitelist a dynamic provider? Contact us at izafirsk@gmail.com.</p>
<p>These exclusions prevent:</p>
<ul>
<li>CORS failures  </li>
<li>Integrity mismatch blocking  </li>
<li>Google reCAPTCHA from breaking  </li>
<li>Google Fonts from disappearing  </li>
<li>Layout shifts caused by blocked assets</li>
</ul>


Auto SRI

Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.

CNR Performance vs Auto SRI