diff --git a/app/code/Magento/Csp/Block/Sri/Hashes.php b/app/code/Magento/Csp/Block/Sri/Hashes.php
new file mode 100644
index 0000000000000..7b67ec4ca534f
--- /dev/null
+++ b/app/code/Magento/Csp/Block/Sri/Hashes.php
@@ -0,0 +1,94 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Block\Sri;
+
+use Magento\Framework\UrlInterface;
+use Magento\Deploy\Package\Package;
+use Magento\Framework\App\ObjectManager;
+use Magento\Framework\View\Element\Template;
+use Magento\Framework\Exception\LocalizedException;
+use Magento\Framework\Serialize\SerializerInterface;
+use Magento\Framework\View\Element\Template\Context;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+
+/**
+ * Block for Subresource Integrity hashes rendering.
+ *
+ * @api
+ */
+class Hashes extends Template
+{
+    /**
+     * @var SerializerInterface
+     */
+    private SerializerInterface $serializer;
+
+    /**
+     * @var SubresourceIntegrityRepositoryPool
+     */
+    private SubresourceIntegrityRepositoryPool $integrityRepositoryPool;
+
+    /**
+     * @param Context $context
+     * @param array $data
+     * @param SubresourceIntegrityRepositoryPool|null $integrityRepositoryPool
+     * @param SerializerInterface|null $serializer
+     */
+    public function __construct(
+        Context $context,
+        array $data = [],
+        ?SubresourceIntegrityRepositoryPool $integrityRepositoryPool = null,
+        ?SerializerInterface $serializer = null
+    ) {
+        parent::__construct($context, $data);
+
+        $this->integrityRepositoryPool = $integrityRepositoryPool ?: ObjectManager::getInstance()
+            ->get(SubresourceIntegrityRepositoryPool::class);
+
+        $this->serializer = $serializer ?: ObjectManager::getInstance()
+            ->get(SerializerInterface::class);
+    }
+
+    /**
+     * Retrieves integrity hashes in serialized format.
+     *
+     * @throws LocalizedException
+     *
+     * @return string
+     */
+    public function getSerialized(): string
+    {
+        $result = [];
+
+        $baseUrl = $this->_urlBuilder->getBaseUrl(
+            ["_type" => UrlInterface::URL_TYPE_STATIC]
+        );
+
+        $integrityRepository = $this->integrityRepositoryPool->get(
+            Package::BASE_AREA
+        );
+
+        foreach ($integrityRepository->getAll() as $integrity) {
+            $url = $baseUrl . $integrity->getPath();
+
+            $result[$url] = $integrity->getHash();
+        }
+
+        $integrityRepository = $this->integrityRepositoryPool->get(
+            $this->_appState->getAreaCode()
+        );
+
+        foreach ($integrityRepository->getAll() as $integrity) {
+            $url = $baseUrl . $integrity->getPath();
+
+            $result[$url] = $integrity->getHash();
+        }
+
+        return $this->serializer->serialize($result);
+    }
+}
diff --git a/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Integrity.php b/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Integrity.php
new file mode 100644
index 0000000000000..41e81752632fb
--- /dev/null
+++ b/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Integrity.php
@@ -0,0 +1,89 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model\Deploy\Package\Processor\PostProcessor;
+
+use Magento\Framework\Filesystem;
+use Magento\Deploy\Package\Package;
+use Magento\Csp\Model\SubresourceIntegrityFactory;
+use Magento\Framework\App\Filesystem\DirectoryList;
+use Magento\Csp\Model\SubresourceIntegrityCollector;
+use Magento\Deploy\Package\Processor\ProcessorInterface;
+use Magento\Csp\Model\SubresourceIntegrity\HashGenerator;
+
+/**
+ * Post-processor that generates integrity hashes after static content package deployed.
+ */
+class Integrity implements ProcessorInterface
+{
+    /**
+     * @var Filesystem
+     */
+    private Filesystem $filesystem;
+
+    /**
+     * @var HashGenerator
+     */
+    private HashGenerator $hashGenerator;
+
+    /**
+     * @var SubresourceIntegrityFactory
+     */
+    private SubresourceIntegrityFactory $integrityFactory;
+
+    /**
+     * @var SubresourceIntegrityCollector
+     */
+    private SubresourceIntegrityCollector $integrityCollector;
+
+    /**
+     * @param Filesystem $filesystem
+     * @param HashGenerator $hashGenerator
+     * @param SubresourceIntegrityFactory $integrityFactory
+     * @param SubresourceIntegrityCollector $integrityCollector
+     */
+    public function __construct(
+        Filesystem $filesystem,
+        HashGenerator $hashGenerator,
+        SubresourceIntegrityFactory $integrityFactory,
+        SubresourceIntegrityCollector $integrityCollector
+    ) {
+        $this->filesystem = $filesystem;
+        $this->hashGenerator = $hashGenerator;
+        $this->integrityFactory = $integrityFactory;
+        $this->integrityCollector = $integrityCollector;
+    }
+
+    /**
+     * @inheritdoc
+     */
+    public function process(Package $package, array $options): bool
+    {
+        $staticDir = $this->filesystem->getDirectoryRead(
+            DirectoryList::ROOT
+        );
+
+        foreach ($package->getFiles() as $file) {
+            if ($file->getExtension() == "js") {
+                $integrity = $this->integrityFactory->create(
+                    [
+                        "data" => [
+                            'hash' => $this->hashGenerator->generate(
+                                $staticDir->readFile($file->getSourcePath())
+                            ),
+                            'path' => $file->getDeployedFilePath()
+                        ]
+                    ]
+                );
+
+                $this->integrityCollector->collect($integrity);
+            }
+        }
+
+        return true;
+    }
+}
diff --git a/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Map.php b/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Map.php
new file mode 100644
index 0000000000000..4e97517a165c5
--- /dev/null
+++ b/app/code/Magento/Csp/Model/Deploy/Package/Processor/PostProcessor/Map.php
@@ -0,0 +1,139 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model\Deploy\Package\Processor\PostProcessor;
+
+use Magento\Deploy\Package\Package;
+use Magento\Deploy\Package\PackageFileFactory;
+use Magento\Deploy\Service\DeployStaticFile;
+use Magento\Framework\App\DeploymentConfig\Writer\PhpFormatter;
+use Magento\Framework\App\Filesystem\DirectoryList;
+use Magento\Framework\Exception\FileSystemException;
+use Magento\Framework\Filesystem;
+use Magento\Framework\View\Asset\Minification;
+use Magento\Framework\View\Asset\RepositoryMap;
+use Magento\Csp\Model\SubresourceIntegrityFactory;
+use Magento\Csp\Model\SubresourceIntegrity\HashGenerator;
+use Magento\Framework\Filesystem\DriverInterface;
+use Magento\Csp\Model\SubresourceIntegrityCollector;
+
+/**
+ * Class Adds Integrity attribute to requirejs-map.js asset
+ *
+ * @SuppressWarnings(PHPMD.CouplingBetweenObjects)
+ */
+class Map extends \Magento\Deploy\Package\Processor\PostProcessor\Map
+{
+
+    /**
+     * @var HashGenerator
+     */
+    private HashGenerator $hashGenerator;
+
+    /**
+     * @var SubresourceIntegrityCollector
+     */
+    private SubresourceIntegrityCollector $integrityCollector;
+
+    /**
+     * @var SubresourceIntegrityFactory
+     */
+    private SubresourceIntegrityFactory $integrityFactory;
+
+    /**
+     * @var Minification
+     */
+    private Minification $minification;
+
+    /**
+     * @var DriverInterface
+     */
+    private DriverInterface $driver;
+
+    /**
+     * @var FileSystem
+     */
+    private FileSystem $filesystem;
+
+    /**
+     * Constructor
+     *
+     * @param DeployStaticFile $deployStaticFile
+     * @param PhpFormatter $formatter
+     * @param PackageFileFactory $packageFileFactory
+     * @param Minification $minification
+     * @param SubresourceIntegrityFactory $integrityFactory
+     * @param HashGenerator $hashGenerator
+     * @param DriverInterface $driver
+     * @param SubresourceIntegrityCollector $integrityCollector
+     * @param FileSystem $filesystem
+     */
+    public function __construct(
+        DeployStaticFile $deployStaticFile,
+        PhpFormatter $formatter,
+        PackageFileFactory $packageFileFactory,
+        Minification $minification,
+        SubresourceIntegrityFactory $integrityFactory,
+        HashGenerator $hashGenerator,
+        DriverInterface $driver,
+        SubresourceIntegrityCollector $integrityCollector,
+        Filesystem $filesystem
+    ) {
+        $this->minification = $minification;
+        $this->integrityFactory = $integrityFactory;
+        $this->hashGenerator = $hashGenerator;
+        $this->driver = $driver;
+        $this->integrityCollector = $integrityCollector;
+        $this->filesystem = $filesystem;
+        parent::__construct($deployStaticFile, $formatter, $packageFileFactory, $minification);
+    }
+
+    /**
+     * @inheritdoc
+     *
+     * @throws FileSystemException
+     */
+    public function process(Package $package, array $options): bool
+    {
+        parent::process($package, $options);
+        $fileName = $this->minification->addMinifiedSign(RepositoryMap::REQUIRE_JS_MAP_NAME);
+        $path = $package->getPath();
+        $relativePath = $path . DIRECTORY_SEPARATOR . $fileName;
+
+        if ($this->fileExists($relativePath)) {
+            $dir = $this->filesystem->getDirectoryWrite(DirectoryList::STATIC_VIEW);
+            $absolutePath = $dir->getAbsolutePath($relativePath);
+            $fileContent = $this->driver->fileGetContents($absolutePath);
+
+            if ($fileContent) {
+                $integrity = $this->integrityFactory->create(
+                    [
+                        "data" => [
+                            'hash' => $this->hashGenerator->generate($fileContent),
+                            'path' => $relativePath
+                        ]
+                    ]
+                );
+                $this->integrityCollector->collect($integrity);
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Check if file exist
+     *
+     * @param string $path
+     * @return bool
+     * @throws FileSystemException
+     */
+    private function fileExists(string $path): bool
+    {
+        $dir = $this->filesystem->getDirectoryWrite(DirectoryList::STATIC_VIEW);
+        return $dir->isExist($path);
+    }
+}
diff --git a/app/code/Magento/Csp/Model/SubresourceIntegrity.php b/app/code/Magento/Csp/Model/SubresourceIntegrity.php
new file mode 100644
index 0000000000000..0a2824c93027e
--- /dev/null
+++ b/app/code/Magento/Csp/Model/SubresourceIntegrity.php
@@ -0,0 +1,34 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model;
+
+/**
+ * Subresource Integrity data model.
+ */
+class SubresourceIntegrity extends \Magento\Framework\DataObject
+{
+    /**
+     * Gets an integrity Path.
+     *
+     * @return string|null
+     */
+    public function getPath(): ?string
+    {
+        return $this->getData("path");
+    }
+
+    /**
+     * Gets an integrity hash.
+     *
+     * @return string|null
+     */
+    public function getHash(): ?string
+    {
+        return $this->getData("hash");
+    }
+}
diff --git a/app/code/Magento/Csp/Model/SubresourceIntegrity/HashGenerator.php b/app/code/Magento/Csp/Model/SubresourceIntegrity/HashGenerator.php
new file mode 100644
index 0000000000000..be78a1a0c66b8
--- /dev/null
+++ b/app/code/Magento/Csp/Model/SubresourceIntegrity/HashGenerator.php
@@ -0,0 +1,37 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model\SubresourceIntegrity;
+
+/**
+ * Subresource Integrity hashes generator.
+ */
+class HashGenerator
+{
+    /**
+     * CHashing algorithm.
+     *
+     * @var string
+     */
+    private const ALGORITHM = 'sha256';
+
+    /**
+     * Computes integrity hash for a given content.
+     *
+     * @param string $content
+     *
+     * @return string
+     */
+    public function generate(string $content): string
+    {
+        $base64Hash = base64_encode(
+            hash(self::ALGORITHM, $content, true)
+        );
+
+        return self::ALGORITHM . "-{$base64Hash}";
+    }
+}
diff --git a/app/code/Magento/Csp/Model/SubresourceIntegrityCollector.php b/app/code/Magento/Csp/Model/SubresourceIntegrityCollector.php
new file mode 100644
index 0000000000000..36b1775b6558c
--- /dev/null
+++ b/app/code/Magento/Csp/Model/SubresourceIntegrityCollector.php
@@ -0,0 +1,49 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model;
+
+/**
+ * Collector of Integrity objects.
+ */
+class SubresourceIntegrityCollector
+{
+    /**
+     * @var array
+     */
+    private array $data = [];
+
+    /**
+     * @param array $data
+     */
+    public function __construct(array $data = [])
+    {
+        $this->data = $data;
+    }
+
+    /**
+     * Collects given Integrity object.
+     *
+     * @param SubresourceIntegrity $integrity
+     *
+     * @return void
+     */
+    public function collect(SubresourceIntegrity $integrity): void
+    {
+        $this->data[] = $integrity;
+    }
+
+    /**
+     * Provides all collected Integrity objects.
+     *
+     * @return SubresourceIntegrity[]
+     */
+    public function release(): array
+    {
+        return $this->data;
+    }
+}
diff --git a/app/code/Magento/Csp/Model/SubresourceIntegrityRepository.php b/app/code/Magento/Csp/Model/SubresourceIntegrityRepository.php
new file mode 100644
index 0000000000000..f2ef550a8bda3
--- /dev/null
+++ b/app/code/Magento/Csp/Model/SubresourceIntegrityRepository.php
@@ -0,0 +1,207 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model;
+
+use Magento\Framework\App\CacheInterface;
+use Magento\Framework\Serialize\SerializerInterface;
+
+/**
+ * Class contains methods equivalent to repository design to manage SRI hashes in cache.
+ */
+class SubresourceIntegrityRepository
+{
+    /**
+     * Cache prefix.
+     *
+     * @var string
+     */
+    private const CACHE_PREFIX = 'INTEGRITY';
+
+    /**
+     * @var array|null
+     */
+    private ?array $data = null;
+
+    /**
+     * @var string|null
+     */
+    private ?string $context;
+
+    /**
+     * @var CacheInterface
+     */
+    private CacheInterface $cache;
+
+    /**
+     * @var SerializerInterface
+     */
+    private SerializerInterface $serializer;
+
+    /**
+     * @var SubresourceIntegrityFactory
+     */
+    private SubresourceIntegrityFactory $integrityFactory;
+
+    /**
+     * @param CacheInterface $cache
+     * @param SerializerInterface $serializer
+     * @param SubresourceIntegrityFactory $integrityFactory
+     * @param string|null $context
+     */
+    public function __construct(
+        CacheInterface $cache,
+        SerializerInterface $serializer,
+        SubresourceIntegrityFactory $integrityFactory,
+        ?string $context = null
+    ) {
+        $this->cache = $cache;
+        $this->serializer = $serializer;
+        $this->integrityFactory = $integrityFactory;
+        $this->context = $context;
+    }
+
+    /**
+     * Gets an Integrity object by path.
+     *
+     * @param string $path
+     *
+     * @return SubresourceIntegrity|null
+     */
+    public function getByPath(string $path): ?SubresourceIntegrity
+    {
+        $data = $this->getData();
+
+        if (isset($data[$path])) {
+            return $this->integrityFactory->create(
+                [
+                    "data" => [
+                        "path" => $path,
+                        "hash" => $data[$path]
+                    ]
+                ]
+            );
+        }
+
+        return null;
+    }
+
+    /**
+     * Gets all available Integrity objects.
+     *
+     * @return SubresourceIntegrity[]
+     */
+    public function getAll(): array
+    {
+        $result = [];
+
+        foreach ($this->getData() as $path => $hash) {
+            $result[] = $this->integrityFactory->create(
+                [
+                    "data" => [
+                        "path" => $path,
+                        "hash" => $hash
+                    ]
+                ]
+            );
+        }
+
+        return $result;
+    }
+
+    /**
+     * Saves Integrity object.
+     *
+     * @param SubresourceIntegrity $integrity
+     *
+     * @return bool
+     */
+    public function save(SubresourceIntegrity $integrity): bool
+    {
+        $data = $this->getData();
+
+        $data[$integrity->getPath()] = $integrity->getHash();
+
+        $this->data = $data;
+
+        return $this->cache->save(
+            $this->serializer->serialize($this->data),
+            $this->getCacheKey(),
+            [self::CACHE_PREFIX]
+        );
+    }
+
+    /**
+     * Saves a bunch of Integrity objects.
+     *
+     * @param SubresourceIntegrity[] $bunch
+     *
+     * @return bool
+     */
+    public function saveBunch(array $bunch): bool
+    {
+        $data = $this->getData();
+
+        foreach ($bunch as $integrity) {
+            $data[$integrity->getPath()] = $integrity->getHash();
+        }
+
+        $this->data = $data;
+
+        return $this->cache->save(
+            $this->serializer->serialize($this->data),
+            $this->getCacheKey(),
+            [self::CACHE_PREFIX]
+        );
+    }
+
+    /**
+     * Deletes all Integrity objects.
+     *
+     * @return bool
+     */
+    public function deleteAll(): bool
+    {
+        $this->data = null;
+
+        return $this->cache->remove(
+            $this->getCacheKey()
+        );
+    }
+
+    /**
+     * Loads integrity data from a storage.
+     *
+     * @return array
+     */
+    private function getData(): array
+    {
+        if ($this->data === null) {
+            $cache = $this->cache->load($this->getCacheKey());
+
+            $this->data = $cache ? $this->serializer->unserialize($cache) : [];
+        }
+
+        return $this->data;
+    }
+
+    /**
+     * Gets a cache key based on current context.
+     *
+     * @return string
+     */
+    private function getCacheKey(): string
+    {
+        $cacheKey = self::CACHE_PREFIX;
+
+        if ($this->context) {
+            $cacheKey .= "_" . $this->context;
+        }
+
+        return $cacheKey;
+    }
+}
diff --git a/app/code/Magento/Csp/Model/SubresourceIntegrityRepositoryPool.php b/app/code/Magento/Csp/Model/SubresourceIntegrityRepositoryPool.php
new file mode 100644
index 0000000000000..5ad9c6c676de8
--- /dev/null
+++ b/app/code/Magento/Csp/Model/SubresourceIntegrityRepositoryPool.php
@@ -0,0 +1,53 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Model;
+
+/**
+ * Pool of subresource integrity repositories.
+ */
+class SubresourceIntegrityRepositoryPool
+{
+    /**
+     * @var array
+     */
+    private array $repositories = [];
+
+    /**
+     * @var SubresourceIntegrityRepositoryFactory
+     */
+    private SubresourceIntegrityRepositoryFactory $integrityRepositoryFactory;
+
+    /**
+     * @param SubresourceIntegrityRepositoryFactory $integrityRepositoryFactory
+     */
+    public function __construct(
+        SubresourceIntegrityRepositoryFactory $integrityRepositoryFactory
+    ) {
+        $this->integrityRepositoryFactory = $integrityRepositoryFactory;
+    }
+
+    /**
+     * Gets subresource integrity repository by given context.
+     *
+     * @param string $context
+     *
+     * @return SubresourceIntegrityRepository
+     */
+    public function get(string $context): SubresourceIntegrityRepository
+    {
+        if (!isset($this->repositories[$context])) {
+            $this->repositories[$context] = $this->integrityRepositoryFactory->create(
+                [
+                    "context" => $context
+                ]
+            );
+        }
+
+        return $this->repositories[$context];
+    }
+}
diff --git a/app/code/Magento/Csp/Plugin/AddDefaultPropertiesToGroupPlugin.php b/app/code/Magento/Csp/Plugin/AddDefaultPropertiesToGroupPlugin.php
new file mode 100644
index 0000000000000..159e2180427a5
--- /dev/null
+++ b/app/code/Magento/Csp/Plugin/AddDefaultPropertiesToGroupPlugin.php
@@ -0,0 +1,81 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Plugin;
+
+use Magento\Framework\App\State;
+use Magento\Deploy\Package\Package;
+use Magento\Framework\View\Asset\AssetInterface;
+use Magento\Framework\View\Asset\LocalInterface;
+use Magento\Framework\View\Asset\GroupedCollection;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+
+/**
+ * Plugin to add integrity to assets on page load.
+ */
+class AddDefaultPropertiesToGroupPlugin
+{
+    /**
+     * @var State
+     */
+    private State $state;
+
+    /**
+     * @var SubresourceIntegrityRepositoryPool
+     */
+    private SubresourceIntegrityRepositoryPool $integrityRepositoryPool;
+
+    /**
+     * @param State $state
+     * @param SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+     */
+    public function __construct(
+        State $state,
+        SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+    ) {
+        $this->state = $state;
+        $this->integrityRepositoryPool = $integrityRepositoryPool;
+    }
+
+    /**
+     * Before Plugin to add Properties to JS assets
+     *
+     * @param GroupedCollection $subject
+     * @param AssetInterface $asset
+     * @param array $properties
+     * @return array
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function beforeGetFilteredProperties(
+        GroupedCollection $subject,
+        AssetInterface $asset,
+        array $properties = []
+    ): array {
+        if ($asset instanceof LocalInterface) {
+            $integrityRepository = $this->integrityRepositoryPool->get(
+                Package::BASE_AREA
+            );
+
+            $integrity = $integrityRepository->getByPath($asset->getPath());
+
+            if (!$integrity) {
+                $integrityRepository = $this->integrityRepositoryPool->get(
+                    $this->state->getAreaCode()
+                );
+
+                $integrity = $integrityRepository->getByPath($asset->getPath());
+            }
+
+            if ($integrity && $integrity->getHash()) {
+                $properties['attributes']['integrity'] = $integrity->getHash();
+                $properties['attributes']['crossorigin'] = 'anonymous';
+            }
+        }
+
+        return [$asset, $properties];
+    }
+}
diff --git a/app/code/Magento/Csp/Plugin/GenerateAssetIntegrity.php b/app/code/Magento/Csp/Plugin/GenerateAssetIntegrity.php
new file mode 100644
index 0000000000000..2b461588fa5ad
--- /dev/null
+++ b/app/code/Magento/Csp/Plugin/GenerateAssetIntegrity.php
@@ -0,0 +1,91 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Plugin;
+
+use Magento\Framework\View\Asset\File;
+use Magento\RequireJs\Model\FileManager;
+use Magento\Csp\Model\SubresourceIntegrityFactory;
+use Magento\Csp\Model\SubresourceIntegrityCollector;
+use Magento\Csp\Model\SubresourceIntegrity\HashGenerator;
+
+/**
+ * Plugin to add asset integrity value after static content deploy.
+ */
+class GenerateAssetIntegrity
+{
+    /**
+     * Supported content types.
+     *
+     * @var array
+     */
+    private const CONTENT_TYPES = ["js"];
+
+    /**
+     * @var HashGenerator
+     */
+    private HashGenerator $hashGenerator;
+
+    /**
+     * @var SubresourceIntegrityFactory
+     */
+    private SubresourceIntegrityFactory $integrityFactory;
+
+    /**
+     * @var SubresourceIntegrityCollector
+     */
+    private SubresourceIntegrityCollector $integrityCollector;
+
+    /**
+     * @param HashGenerator $hashGenerator
+     * @param SubresourceIntegrityFactory $integrityFactory
+     * @param SubresourceIntegrityCollector $integrityCollector
+     */
+    public function __construct(
+        HashGenerator $hashGenerator,
+        SubresourceIntegrityFactory $integrityFactory,
+        SubresourceIntegrityCollector $integrityCollector
+    ) {
+        $this->hashGenerator = $hashGenerator;
+        $this->integrityFactory = $integrityFactory;
+        $this->integrityCollector = $integrityCollector;
+    }
+
+    /**
+     * Generates integrity for RequireJs config.
+     *
+     * @param FileManager $subject
+     * @param File $result
+     *
+     * @return File
+     *
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function afterCreateRequireJsConfigAsset(
+        FileManager $subject,
+        File $result
+    ): File {
+        if (PHP_SAPI == 'cli') {
+            if (in_array($result->getContentType(), self::CONTENT_TYPES)) {
+                $integrity = $this->integrityFactory->create(
+                    [
+                        "data" => [
+                            'hash' => $this->hashGenerator->generate(
+                                $result->getContent()
+                            ),
+                            'path' => $result->getPath()
+                        ]
+                    ]
+                );
+
+                $this->integrityCollector->collect($integrity);
+            }
+        }
+
+        return $result;
+    }
+}
diff --git a/app/code/Magento/Csp/Plugin/RemoveAllAssetIntegrityHashes.php b/app/code/Magento/Csp/Plugin/RemoveAllAssetIntegrityHashes.php
new file mode 100644
index 0000000000000..85b97e9091c54
--- /dev/null
+++ b/app/code/Magento/Csp/Plugin/RemoveAllAssetIntegrityHashes.php
@@ -0,0 +1,69 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Plugin;
+
+use Magento\Framework\App\Area;
+use Magento\Deploy\Package\Package;
+use Magento\Deploy\Console\DeployStaticOptions;
+use Magento\Deploy\Service\DeployStaticContent;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+
+/**
+ * Plugin that removes existing integrity hashes for all assets.
+ */
+class RemoveAllAssetIntegrityHashes
+{
+    /**
+     * @var SubresourceIntegrityRepositoryPool
+     */
+    private SubresourceIntegrityRepositoryPool $integrityRepositoryPool;
+
+    /**
+     * @param SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+     */
+    public function __construct(
+        SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+    ) {
+        $this->integrityRepositoryPool = $integrityRepositoryPool;
+    }
+
+    /**
+     * Removes existing integrity hashes before static content deploy
+     *
+     * @param DeployStaticContent $subject
+     * @param array $options
+     *
+     * @return void
+     *
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function beforeDeploy(
+        DeployStaticContent $subject,
+        array $options
+    ): void {
+        if (PHP_SAPI == 'cli' && !$this->isRefreshContentVersionOnly($options)) {
+            foreach ([Package::BASE_AREA, Area::AREA_FRONTEND, Area::AREA_ADMINHTML] as $area) {
+                $this->integrityRepositoryPool->get($area)
+                    ->deleteAll();
+            }
+        }
+    }
+
+    /**
+     * Checks if only version refresh is requested.
+     *
+     * @param array $options
+     *
+     * @return bool
+     */
+    private function isRefreshContentVersionOnly(array $options): bool
+    {
+        return isset($options[DeployStaticOptions::REFRESH_CONTENT_VERSION_ONLY])
+            && $options[DeployStaticOptions::REFRESH_CONTENT_VERSION_ONLY];
+    }
+}
diff --git a/app/code/Magento/Csp/Plugin/StoreAssetIntegrityHashes.php b/app/code/Magento/Csp/Plugin/StoreAssetIntegrityHashes.php
new file mode 100644
index 0000000000000..21bfd581449cb
--- /dev/null
+++ b/app/code/Magento/Csp/Plugin/StoreAssetIntegrityHashes.php
@@ -0,0 +1,70 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Plugin;
+
+use Magento\Deploy\Service\DeployStaticContent;
+use Magento\Csp\Model\SubresourceIntegrityCollector;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+
+/**
+ * Plugin that stores generated integrity hashes for all assets.
+ */
+class StoreAssetIntegrityHashes
+{
+    /**
+     * @var SubresourceIntegrityCollector
+     */
+    private SubresourceIntegrityCollector $integrityCollector;
+
+    /**
+     * @var SubresourceIntegrityRepositoryPool
+     */
+    private SubresourceIntegrityRepositoryPool $integrityRepositoryPool;
+
+    /**
+     * @param SubresourceIntegrityCollector $integrityCollector
+     * @param SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+     */
+    public function __construct(
+        SubresourceIntegrityCollector $integrityCollector,
+        SubresourceIntegrityRepositoryPool $integrityRepositoryPool
+    ) {
+        $this->integrityCollector = $integrityCollector;
+        $this->integrityRepositoryPool = $integrityRepositoryPool;
+    }
+
+    /**
+     * Stores generated integrity hashes after static content deploy
+     *
+     * @param DeployStaticContent $subject
+     * @param mixed $result
+     * @param array $options
+     *
+     * @return void
+     *
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function afterDeploy(
+        DeployStaticContent $subject,
+        mixed $result,
+        array $options
+    ): void {
+        $bunches = [];
+
+        foreach ($this->integrityCollector->release() as $integrity) {
+            $area = explode("/", $integrity->getPath())[0];
+
+            $bunches[$area][] = $integrity;
+        }
+
+        foreach ($bunches as $area => $bunch) {
+            $this->integrityRepositoryPool->get($area)
+                ->saveBunch($bunch);
+        }
+    }
+}
diff --git a/app/code/Magento/Csp/Test/Unit/Model/SubresourceIntegrityRepositoryTest.php b/app/code/Magento/Csp/Test/Unit/Model/SubresourceIntegrityRepositoryTest.php
new file mode 100644
index 0000000000000..0b7a55d896f04
--- /dev/null
+++ b/app/code/Magento/Csp/Test/Unit/Model/SubresourceIntegrityRepositoryTest.php
@@ -0,0 +1,129 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Test\Unit\Model;
+
+use Magento\Framework\App\CacheInterface;
+use Magento\Framework\Serialize\SerializerInterface;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+use Magento\Csp\Model\SubresourceIntegrity;
+use Magento\Csp\Model\SubresourceIntegrityRepository;
+use Magento\Csp\Model\SubresourceIntegrityFactory;
+
+/**
+ * Unit Test for Class @see Magento\Csp\Model\SubresourceIntegrityRepository
+ *
+ */
+class SubresourceIntegrityRepositoryTest extends TestCase
+{
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $cacheMock;
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $serializerMock;
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $integrityFactoryMock;
+
+    /**
+     * @var SubresourceIntegrityRepository|null
+     */
+    private ?SubresourceIntegrityRepository $subresourceIntegrityRepository = null;
+
+    /**
+     * Initialize dependencies
+     *
+     * @return void
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->cacheMock = $this->getMockBuilder(CacheInterface::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['save', 'load'])
+            ->getMockForAbstractClass();
+        $this->serializerMock = $this->getMockBuilder(SerializerInterface::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['serialize', 'unserialize'])
+            ->getMockForAbstractClass();
+        $this->integrityFactoryMock = $this->getMockBuilder(SubresourceIntegrityFactory::class)
+            ->disableOriginalConstructor()
+            ->getMock();
+
+        $this->subresourceIntegrityRepository = new SubresourceIntegrityRepository(
+            $this->cacheMock,
+            $this->serializerMock,
+            $this->integrityFactoryMock
+        );
+    }
+
+    /** Test save repository
+     *
+     *
+     * @return void
+     */
+    public function testSave(): void
+    {
+        $data = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash',
+                'path' => 'js/jquery.js'
+            ]
+        );
+
+        $expected[$data->getPath()] = $data->getHash();
+        $serialized = json_encode($expected);
+        $this->cacheMock->expects($this->once())->method('load')->willReturn(false);
+        $this->serializerMock->expects($this->once())->method('serialize')->with($expected)->willReturn($serialized);
+        $this->cacheMock->expects($this->once())->method('save')->willReturn(true);
+        $this->assertTrue($this->subresourceIntegrityRepository->save($data));
+    }
+
+    /** Test that cache saves in bunch
+     *
+     *
+     * @return void
+     */
+    public function testSaveBunch(): void
+    {
+        $bunch1 = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash',
+                'path' => 'js/jquery.js'
+            ]
+        );
+
+        $bunch2 = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash2',
+                'path' => 'js/test.js'
+            ]
+        );
+
+        $bunches = [$bunch1, $bunch2];
+
+        $expected = [];
+
+        foreach ($bunches as $bunch) {
+            $expected[$bunch->getPath()] = $bunch->getHash();
+        }
+        $serializedBunch = json_encode($expected);
+        $this->cacheMock->expects($this->once())->method('load')->willReturn(false);
+        $this->serializerMock->expects($this->once())->method('serialize')
+            ->with($expected)->willReturn($serializedBunch);
+        $this->cacheMock->expects($this->once())->method('save')->willReturn(true);
+        $this->assertTrue($this->subresourceIntegrityRepository->saveBunch($bunches));
+    }
+}
diff --git a/app/code/Magento/Csp/Test/Unit/Plugin/AddDefaultPropertiesToGroupPluginTest.php b/app/code/Magento/Csp/Test/Unit/Plugin/AddDefaultPropertiesToGroupPluginTest.php
new file mode 100644
index 0000000000000..3e6b08f17bb7b
--- /dev/null
+++ b/app/code/Magento/Csp/Test/Unit/Plugin/AddDefaultPropertiesToGroupPluginTest.php
@@ -0,0 +1,113 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Test\Unit\Plugin;
+
+use Magento\Csp\Model\SubresourceIntegrity;
+use Magento\Csp\Model\SubresourceIntegrityRepository;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+use Magento\Csp\Plugin\AddDefaultPropertiesToGroupPlugin;
+use Magento\Framework\View\Asset\File;
+use Magento\Framework\View\Asset\GroupedCollection;
+use Magento\Framework\App\State;
+
+/**
+ * Test for class Magento\Csp\Plugin\AddDefaultPropertiesToGroupPlugin
+ *
+ */
+class AddDefaultPropertiesToGroupPluginTest extends TestCase
+{
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $assetInterfaceMock;
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $integrityRepositoryPoolMock;
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $stateMock;
+
+    /**
+     * @var AddDefaultPropertiesToGroupPlugin
+     */
+    private AddDefaultPropertiesToGroupPlugin $plugin;
+
+    /**
+     * Initialize Dependencies
+     *
+     * @return void
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->integrityRepositoryPoolMock = $this->getMockBuilder(SubresourceIntegrityRepositoryPool::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['get'])
+            ->getMock();
+        $this->assetInterfaceMock = $this->getMockBuilder(File::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['getPath'])
+            ->getMockForAbstractClass();
+        $this->stateMock = $this->getMockBuilder(State::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['getAreaCode'])
+            ->getMock();
+        $this->plugin = new AddDefaultPropertiesToGroupPlugin(
+            $this->stateMock,
+            $this->integrityRepositoryPoolMock
+        );
+    }
+
+    /**
+     * Test for plugin with Js assets
+     *
+     * @return void
+     */
+    public function testBeforeGetFilteredProperties(): void
+    {
+        $integrityRepositoryMock = $this->getMockBuilder(SubresourceIntegrityRepository::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['getByPath'])
+            ->getMock();
+        $groupedCollectionMock = $this->getMockBuilder(GroupedCollection::class)
+            ->disableOriginalConstructor()
+            ->getMock();
+        $path = 'jquery.js';
+        $area = 'base';
+
+        $data = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash',
+                'path' => $path
+            ]
+        );
+        $properties['attributes']['integrity'] = $data->getHash();
+        $properties['attributes']['crossorigin'] = 'anonymous';
+        $expected = [$this->assetInterfaceMock, $properties];
+        $this->integrityRepositoryPoolMock->expects($this->once())->method('get')->with($area)
+            ->willReturn(
+                $integrityRepositoryMock
+            );
+        $this->assetInterfaceMock->expects($this->once())->method('getPath')->willReturn($path);
+        $integrityRepositoryMock->expects($this->once())->method('getByPath')->with($path)->willReturn($data);
+        $this->assertEquals(
+            $expected,
+            $this->plugin->beforeGetFilteredProperties(
+                $groupedCollectionMock,
+                $this->assetInterfaceMock
+            )
+        );
+    }
+}
diff --git a/app/code/Magento/Csp/Test/Unit/Plugin/StoreAssetIntegrityHashesTest.php b/app/code/Magento/Csp/Test/Unit/Plugin/StoreAssetIntegrityHashesTest.php
new file mode 100644
index 0000000000000..7ac1d462015c7
--- /dev/null
+++ b/app/code/Magento/Csp/Test/Unit/Plugin/StoreAssetIntegrityHashesTest.php
@@ -0,0 +1,96 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\Csp\Test\Unit\Plugin;
+
+use Magento\Csp\Model\SubresourceIntegrity;
+use Magento\Csp\Model\SubresourceIntegrityRepository;
+use Magento\Csp\Model\SubresourceIntegrityRepositoryPool;
+use Magento\Deploy\Service\DeployStaticContent;
+use PHPUnit\Framework\MockObject\MockObject;
+use Magento\Csp\Plugin\StoreAssetIntegrityHashes;
+use Magento\Csp\Model\SubresourceIntegrityCollector;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Plugin that removes existing integrity hashes for all assets.
+ */
+class StoreAssetIntegrityHashesTest extends TestCase
+{
+    /**
+     * @var MockObject
+     */
+    private MockObject $integrityRepositoryPoolMock;
+
+    /**
+     * @var MockObject
+     */
+    private MockObject $integrityCollectorMock;
+
+    /**
+     * @var StoreAssetIntegrityHashes
+     */
+    private StoreAssetIntegrityHashes $plugin;
+
+    /**
+     * Initialize Dependencies
+     *
+     * @return void
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->integrityRepositoryPoolMock = $this->getMockBuilder(SubresourceIntegrityRepositoryPool::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['get'])
+            ->getMock();
+        $this->integrityCollectorMock = $this->getMockBuilder(SubresourceIntegrityCollector::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['release'])
+            ->getMock();
+        $this->plugin = new StoreAssetIntegrityHashes(
+            $this->integrityCollectorMock,
+            $this->integrityRepositoryPoolMock,
+        );
+    }
+
+    /**
+     * Test After Deploy method of plugin
+     *
+     * @return void
+     * @doesNotPerformAssertions
+     */
+    public function testAfterDeploy(): void
+    {
+        $bunch1 = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash',
+                'path' => 'adminhtml/js/jquery.js'
+            ]
+        );
+
+        $bunch2 = new SubresourceIntegrity(
+            [
+                'hash' => 'testhash2',
+                'path' => 'frontend/js/test.js'
+            ]
+        );
+
+        $bunches = [$bunch1, $bunch2];
+        $deployStaticContentMock = $this->getMockBuilder(DeployStaticContent::class)
+            ->disableOriginalConstructor()
+            ->getMock();
+        $subResourceIntegrityMock = $this->getMockBuilder(SubresourceIntegrityRepository::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['saveBunch'])
+            ->getMock();
+        $this->integrityCollectorMock->expects($this->once())->method('release')->willReturn($bunches);
+        $this->integrityRepositoryPoolMock->expects($this->any())->method('get')->willReturn($subResourceIntegrityMock);
+        $subResourceIntegrityMock->expects($this->any())->method('saveBunch')->willReturn(true);
+        $this->plugin->afterDeploy($deployStaticContentMock, null, []);
+    }
+}
diff --git a/app/code/Magento/Csp/composer.json b/app/code/Magento/Csp/composer.json
index c085b06d6900d..c85b28e04a6b0 100644
--- a/app/code/Magento/Csp/composer.json
+++ b/app/code/Magento/Csp/composer.json
@@ -7,7 +7,9 @@
     "require": {
         "php": "~8.1.0||~8.2.0||~8.3.0",
         "magento/framework": "*",
-        "magento/module-store": "*"
+        "magento/module-store": "*",
+        "magento/module-require-js": "*",
+        "magento/module-deploy": "*"
     },
     "type": "magento2-module",
     "license": [
diff --git a/app/code/Magento/Csp/etc/di.xml b/app/code/Magento/Csp/etc/di.xml
index b6a887ab9d943..13c1f225a00f2 100644
--- a/app/code/Magento/Csp/etc/di.xml
+++ b/app/code/Magento/Csp/etc/di.xml
@@ -111,4 +111,27 @@
             <argument name="cache" xsi:type="object">Magento\Csp\Model\BlockCache</argument>
         </arguments>
     </type>
+    <type name="Magento\Deploy\Package\Package">
+        <arguments>
+            <argument name="postProcessors" xsi:type="array">
+                <item name="integrity" xsi:type="object">Magento\Csp\Model\Deploy\Package\Processor\PostProcessor\Integrity</item>
+            </argument>
+        </arguments>
+    </type>
+    <type name="Magento\Framework\View\Asset\GroupedCollection">
+        <plugin name="addDefaultPropertiesToGroup" type="Magento\Csp\Plugin\AddDefaultPropertiesToGroupPlugin" />
+    </type>
+    <type name="Magento\Deploy\Service\DeployStaticContent">
+        <plugin name="removeAllAssetIntegrityHashes" type="Magento\Csp\Plugin\RemoveAllAssetIntegrityHashes" />
+        <plugin name="storeAssetIntegrityHashes" type="Magento\Csp\Plugin\StoreAssetIntegrityHashes" />
+    </type>
+    <type name="Magento\RequireJs\Model\FileManager">
+        <plugin name="addResourceIntegrityAfterAssetCreate" type="Magento\Csp\Plugin\GenerateAssetIntegrity"/>
+    </type>
+    <preference for="Magento\Deploy\Package\Processor\PostProcessor\Map" type="Magento\Csp\Model\Deploy\Package\Processor\PostProcessor\Map" />
+    <type name="Magento\Csp\Model\Deploy\Package\Processor\PostProcessor\Map">
+        <arguments>
+            <argument name="driver" xsi:type="object">Magento\Framework\Filesystem\Driver\File</argument>
+        </arguments>
+    </type>
 </config>
diff --git a/app/code/Magento/Csp/view/adminhtml/layout/sales_order_create_index.xml b/app/code/Magento/Csp/view/adminhtml/layout/sales_order_create_index.xml
new file mode 100644
index 0000000000000..73fe99913466c
--- /dev/null
+++ b/app/code/Magento/Csp/view/adminhtml/layout/sales_order_create_index.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0"?>
+<!--
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+-->
+<page xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:framework:View/Layout/etc/page_configuration.xsd">
+    <head>
+        <link src="Magento_Csp::js/sri.js"/>
+    </head>
+    <body>
+        <referenceBlock name="head.additional">
+            <block class="Magento\Csp\Block\Sri\Hashes" name="admin.sri.hashes" template="Magento_Csp::sri/hashes.phtml"/>
+        </referenceBlock>
+    </body>
+</page>
diff --git a/app/code/Magento/Csp/view/base/templates/sri/hashes.phtml b/app/code/Magento/Csp/view/base/templates/sri/hashes.phtml
new file mode 100644
index 0000000000000..e9d666a50550d
--- /dev/null
+++ b/app/code/Magento/Csp/view/base/templates/sri/hashes.phtml
@@ -0,0 +1,18 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+/** @var \Magento\Csp\Block\Sri\Hashes $block */
+/** @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer */
+?>
+
+<?php $sriHashes = /* @noEscape */ $block->getSerialized();
+$scriptString = <<<script
+        window.sriHashes = {$sriHashes};
+script;
+?>
+
+<?= /* @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false) ?>
+
diff --git a/app/code/Magento/Csp/view/base/web/js/sri.js b/app/code/Magento/Csp/view/base/web/js/sri.js
new file mode 100644
index 0000000000000..0129918a3b72b
--- /dev/null
+++ b/app/code/Magento/Csp/view/base/web/js/sri.js
@@ -0,0 +1,13 @@
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+require.config({
+    onNodeCreated: function (node, config, moduleName, url) {
+        'use strict';
+        if ('sriHashes' in window && url in window.sriHashes) {
+            node.setAttribute('integrity', window.sriHashes[url]);
+            node.setAttribute('crossorigin', 'anonymous');
+        }
+    }
+});
diff --git a/app/code/Magento/Csp/view/frontend/layout/checkout_index_index.xml b/app/code/Magento/Csp/view/frontend/layout/checkout_index_index.xml
new file mode 100644
index 0000000000000..6f1b51dc1347c
--- /dev/null
+++ b/app/code/Magento/Csp/view/frontend/layout/checkout_index_index.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0"?>
+<!--
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+-->
+<page xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" layout="checkout" xsi:noNamespaceSchemaLocation="urn:magento:framework:View/Layout/etc/page_configuration.xsd">
+    <head>
+        <link src="Magento_Csp::js/sri.js"/>
+    </head>
+    <body>
+        <referenceBlock name="head.additional">
+            <block class="Magento\Csp\Block\Sri\Hashes" name="csp.sri.hashes" template="Magento_Csp::sri/hashes.phtml"/>
+        </referenceBlock>
+    </body>
+</page>
diff --git a/dev/tests/static/testsuite/Magento/Test/GraphQl/LiveCodeTest.php b/dev/tests/static/testsuite/Magento/Test/GraphQl/LiveCodeTest.php
index a1d82aef8fea0..daa412ee94153 100644
--- a/dev/tests/static/testsuite/Magento/Test/GraphQl/LiveCodeTest.php
+++ b/dev/tests/static/testsuite/Magento/Test/GraphQl/LiveCodeTest.php
@@ -7,6 +7,8 @@
 
 namespace Magento\Test\GraphQl;
 
+use Exception;
+use Magento\Framework\App\Utility\Files;
 use Magento\TestFramework\CodingStandard\Tool\CodeSniffer;
 use Magento\TestFramework\CodingStandard\Tool\CodeSniffer\Wrapper;
 use Magento\Test\Php\LiveCodeTest as PHPCodeTest;
@@ -86,6 +88,7 @@ public function testModulesRequireGraphQLChange(): void
      * returns a array with the list of graphql modules which require changes
      *
      * @return array
+     * @throws Exception
      */
     private static function getModulesRequiringGraphQLChange(): array
     {
@@ -95,10 +98,11 @@ private static function getModulesRequiringGraphQLChange(): array
             '',
             '/_files/whitelist/graphql.txt'
         );
+        $fileList = self::filterFiles($whitelistFiles);
 
         $updatedGraphQlModules = [];
         $requireGraphQLChanges = [];
-        foreach ($whitelistFiles as $whitelistFile) {
+        foreach ($fileList as $whitelistFile) {
             $moduleName = self::getModuleName($whitelistFile);
 
             if (!$moduleName) {
@@ -209,4 +213,22 @@ private static function filterUiComponents(array $uIComponentClasses, string $mo
         }
         return $frontendUIComponent;
     }
+
+    /**
+     * Skip files not requiring graphql side changes
+     *
+     * @param array $fileList
+     * @return array
+     * @throws Exception
+     */
+    private static function filterFiles(array $fileList): array
+    {
+        $denyListFiles = Files::init()->readLists(__DIR__ . '/_files/denylist/*.txt');
+
+        $filter = function ($value) use ($denyListFiles) {
+            return !in_array($value, $denyListFiles);
+        };
+
+        return array_filter($fileList, $filter);
+    }
 }
diff --git a/dev/tests/static/testsuite/Magento/Test/GraphQl/_files/denylist/magento.txt b/dev/tests/static/testsuite/Magento/Test/GraphQl/_files/denylist/magento.txt
new file mode 100644
index 0000000000000..ce0ea1d27cfed
--- /dev/null
+++ b/dev/tests/static/testsuite/Magento/Test/GraphQl/_files/denylist/magento.txt
@@ -0,0 +1 @@
+app/code/Magento/Csp/Block/Sri/Hashes.php
diff --git a/lib/internal/Magento/Framework/View/Asset/Collection.php b/lib/internal/Magento/Framework/View/Asset/Collection.php
index 3f40edb3535b1..2cfa52e38ac7d 100644
--- a/lib/internal/Magento/Framework/View/Asset/Collection.php
+++ b/lib/internal/Magento/Framework/View/Asset/Collection.php
@@ -11,7 +11,7 @@
 class Collection
 {
     /**
-     * Assets
+     * Collection of Assets
      *
      * @var AssetInterface[]
      */
@@ -30,6 +30,8 @@ public function add($identifier, AssetInterface $asset)
     }
 
     /**
+     * Insert Asset after specified key
+     *
      * @param string $identifier
      * @param AssetInterface $asset
      * @param string $key
@@ -47,7 +49,9 @@ public function insert($identifier, AssetInterface $asset, $key)
             }
         }
 
-        $this->assets = $result;
+        if (!empty($result)) {
+            $this->assets = $result;
+        }
     }
 
     /**
diff --git a/lib/internal/Magento/Framework/View/Asset/GroupedCollection.php b/lib/internal/Magento/Framework/View/Asset/GroupedCollection.php
index a574b272a2876..0b4d18ff3693f 100644
--- a/lib/internal/Magento/Framework/View/Asset/GroupedCollection.php
+++ b/lib/internal/Magento/Framework/View/Asset/GroupedCollection.php
@@ -16,13 +16,17 @@ class GroupedCollection extends Collection
     /**#@+
      * Special properties, enforced to be grouped by
      */
-    const PROPERTY_CONTENT_TYPE = 'content_type';
+    public const PROPERTY_CONTENT_TYPE = 'content_type';
 
-    const PROPERTY_CAN_MERGE = 'can_merge';
+    public const PROPERTY_CAN_MERGE = 'can_merge';
 
     /**#@-*/
 
-    /**#@-*/
+    /**
+     * Factory for PropertyGroup
+     *
+     * @var PropertyGroupFactory
+     */
     protected $propertyFactory;
 
     /**
@@ -58,6 +62,8 @@ public function add($identifier, AssetInterface $asset, array $properties = [])
     }
 
     /**
+     * Insert asset by after key
+     *
      * @param string $identifier
      * @param AssetInterface $asset
      * @param string $key
@@ -67,10 +73,19 @@ public function insert($identifier, AssetInterface $asset, $key)
     {
         parent::insert($identifier, $asset, $key);
         $properties = $this->getFilteredProperties($asset);
-        $this->getGroupFor($properties)->insert($identifier, $asset, $key);
+        $group = $this->getGroupFor($properties);
+        $groupAssets = $group->getAll();
+
+        if (!$groupAssets) {
+            //add current asset to group
+            $group->add($identifier, $asset);
+        }
+        $group->insert($identifier, $asset, $key);
     }
 
     /**
+     * Get Asset Properties
+     *
      * @param AssetInterface $asset
      * @param array $properties
      * @return array
diff --git a/lib/internal/Magento/Framework/View/Layout/etc/head.xsd b/lib/internal/Magento/Framework/View/Layout/etc/head.xsd
index 4ecbf81ee32aa..c6bcc0c565949 100644
--- a/lib/internal/Magento/Framework/View/Layout/etc/head.xsd
+++ b/lib/internal/Magento/Framework/View/Layout/etc/head.xsd
@@ -56,6 +56,15 @@
         <xs:attribute name="charset" type="xs:string"/>
         <xs:attribute name="type" type="xs:string"/>
         <xs:attribute name="src_type" type="xs:string"/>
+        <xs:attribute name="integrity" type="xs:string"/>
+        <xs:attribute name="crossorigin">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="anonymous" />
+                    <xs:enumeration value="use-credentials" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
     </xs:complexType>
 
     <xs:complexType name="headAttributeType">