Hi Roger,

Thank you for your feature request.

After thorough evaluation, we must decline this request as implementing SRI (integrity and crossorigin attributes) support in RadScriptReference is not technically feasible due to limitations in the Microsoft ASP.NET WebForms framework.

Why this cannot be implemented:

The RadScriptReference class inherits from Microsoft's System.Web.UI.ScriptReference, which does not expose integrity or crossorigin properties. Since the base ASP.NET ScriptManager doesn't support SRI attributes, RadScriptManager cannot add this functionality without framework-level changes from Microsoft.

As Microsoft has stated in their IIS Support Blog, WebForms is considered complete with no new features being added, so these properties will not be added to the base framework.

Workarounds:

• For external libraries (jQuery, etc.): Register scripts manually in your Master Page using standard <script> tags with integrity attributes:
  

  <script src="https://code.jquery.com/jquery-3.7.1.min.js" 
          integrity="sha384-..." 
          crossorigin="anonymous"></script>

• For Telerik resources: Set up a Custom Local CDN to host Telerik scripts locally, reducing reliance on external CDNs. Note: This does not add SRI attributes but eliminates the external dependency.
• Download external resources locally and serve them from your application

We understand this is not the answer you were hoping for, but we believe it's important to provide clarity on the technical constraints involved.

Regards,
Rumen
Progress Telerik