ArcGIS API's SRI hash has changed

[JeffJacobson]

It appears the http://js.arcgis.com/3.17/init.js file has changed, causing SRI checks to fail. Did Esri intentionally change the file recently, or has there been a hack? I thought that once a version of the API was released, it was not supposed to change. (An update would require a new version number.)

[SteveCole]

I don't know anything about this but I was just trying to use your GeoPortal app yesterday and it wasn't loading due to that error. I was going to report it to you but the weird thing was that it still loaded on my iPhone- just not my work computer. I just chalked it up to some change by our IT department.

[JeffJacobson]

I updated the "integrity" tag in the GeoPortal HTML so that it would work again. (The GeoPortal failure is what prompted this question.) The reason that it worked on your iPhone is that iOS doesn't support subresource integrity checking.

[BjornSvensson · Accepted solution]

Yes, that was an intentional change to support recent/upcoming versions of Chrome/Safari/Firefox. See https://blogs.esri.com/esri/supportcenter/2016/09/20/announcement-errors-encountered-in-arcgis-for-s... for more background information.