Code Verify is an extension for verifying the integrity of a web page.
The idea is you can publish what JavaScript should appear on your site into a "manifest". The manifest consists of the hashes of all the JavaScript files in a given release. This browser extension can consume the manifest and verify that only that code executes, or else display a warning to the user.
This repository however is a modification to the original Code Verify extension to support non-meta websites.
To install this version of Code Verify, the repository needs to be cloned and compiled. The build process requires npm and yarn to be installed prior. After cloning the repository, run the following commands to build the extension into the dist folder.
yarn install
yarn build
Now, load the extension from the browser by navigating to the dist subdirectory in the project directory.
Since the Cloudflare audit endpoint used by the original Code Verify extension to retrieve the manifest root hash is not public, we simulated the audit endpoint on a server. To change the URL to the endpoint, look at getCFRootHash.ts.
Code Verify is MIT licensed.