3428679 - Career site does not apply Subresource Integrity (SRI) - Recruiting Marketing

There is a requirement to verify whether SAP SuccessFactors Recruiting Marketing (RMK) Career Sites support the use of Subresource Integrity (SRI) to validate externally loaded resources and enhance security.

SAP SuccessFactors Recruiting Marketing

This concern was reviewed by the architecture security group and determined to be invalid

The resources identified are loaded from rmkcdn.successfactors.com, which is an SAP SuccessFactors‑managed domain and part of SAP's controlled infrastructure.

Subresource Integrity (SRI) is primarily designed to protect against supply‑chain risks associated with externally hosted, third‑party resources. Since the referenced resources originate from SAP‑controlled domains rather than untrusted external providers, the risk scenario that SRI is intended to mitigate does not apply.

As a result, the absence of SRI on the career site is not considered a security vulnerability and does not require remediation.

Requests to implement SRI in this scenario are considered enhancement requests and should be submitted through the standard enhancement request process. For more information, refer to SAP Knowledge Base Article 2090228

2090228 - How to Submit Ideas for SAP SuccessFactors Products

rmk, recruiting marketing, security, vulnerability, Subresource, Integrity, SRI , KBA , LOD-SF-RMK-PSI , Security , LOD-SF-RMK-SEC , Security & Vulnerabilities , Problem