v150 · CSS · Security
Modifier Builder
Configure cross-origin(), integrity(), and referrer-policy() request modifiers for a CSS url() value and see the generated syntax. Switch between background-image, @font-face src, and @import contexts.
Checking CSS URL request modifier support…
Browser parser:
Checking…
Generated CSS has not been validated yet.
| modifier | values | effect |
|---|---|---|
| cross-origin(anonymous) | anonymous, use-credentials | Sets CORS mode for the request. anonymous sends no credentials; use-credentials includes cookies and TLS certs. |
| integrity("sha256-…") | SRI hash string | Browser verifies the resource hash before using it — same as the HTML integrity= attribute. Mismatches block the resource. |
| referrer-policy(no-referrer) | any Referrer-Policy value | Controls the Referer header sent with the CSS resource fetch. Useful for CDN privacy or hiding the embedding page URL. |
references
implementation reference
Need the exact API surface, compatibility boundaries, errors, lifecycle, and source links? Read the matching gendn reference ↗