diff --git a/packages/apps/package.json b/packages/apps/package.json
index eb32264563..4763348ca8 100644
--- a/packages/apps/package.json
+++ b/packages/apps/package.json
@@ -51,6 +51,7 @@
     "webpack": "^5.74.0",
     "webpack-cli": "^4.10.0",
     "webpack-dev-server": "^4.10.0",
-    "webpack-merge": "^5.8.0"
+    "webpack-merge": "^5.8.0",
+    "webpack-subresource-integrity": "^5.1.0"
   }
 }
diff --git a/packages/apps/webpack.config.cjs b/packages/apps/webpack.config.cjs
index 44a86e9435..87976bb5bf 100644
--- a/packages/apps/webpack.config.cjs
+++ b/packages/apps/webpack.config.cjs
@@ -5,6 +5,7 @@ const fs = require('fs');
 const HtmlWebpackPlugin = require('html-webpack-plugin');
 const path = require('path');
 const { merge } = require('webpack-merge');
+const { SubresourceIntegrityPlugin } = require('webpack-subresource-integrity');
 
 const baseConfig = require('./webpack.base.cjs');
 
@@ -15,7 +16,11 @@ module.exports = merge(
   baseConfig(context),
   {
     devtool: process.env.BUILD_ANALYZE ? 'source-map' : false,
+    output: {
+      crossOriginLoading: 'anonymous'
+    },
     plugins: [
+      new SubresourceIntegrityPlugin(),
       new HtmlWebpackPlugin({
         PAGE_TITLE: 'Polkadot/Substrate Portal',
         inject: true,
diff --git a/yarn.lock b/yarn.lock
index e74daedee3..456fad3697 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3220,6 +3220,7 @@ __metadata:
     webpack-cli: ^4.10.0
     webpack-dev-server: ^4.10.0
     webpack-merge: ^5.8.0
+    webpack-subresource-integrity: ^5.1.0
   languageName: unknown
   linkType: soft
 
@@ -19594,6 +19595,13 @@ resolve@^2.0.0-next.3:
   languageName: node
   linkType: hard
 
+"typed-assert@npm:^1.0.8":
+  version: 1.0.9
+  resolution: "typed-assert@npm:1.0.9"
+  checksum: 79351bd3ea184a552bf55a77bd3012f128741c841ed718d054c5abbbc8925362aa033ae2cdcc79e1f445a15112447c8a95a08ddf7ff8aeb04f805e92187f77c1
+  languageName: node
+  linkType: hard
+
 "typed-styles@npm:^0.0.7":
   version: 0.0.7
   resolution: "typed-styles@npm:0.0.7"
@@ -20731,6 +20739,21 @@ resolve@^2.0.0-next.3:
   languageName: node
   linkType: hard
 
+"webpack-subresource-integrity@npm:^5.1.0":
+  version: 5.1.0
+  resolution: "webpack-subresource-integrity@npm:5.1.0"
+  dependencies:
+    typed-assert: ^1.0.8
+  peerDependencies:
+    html-webpack-plugin: ">= 5.0.0-beta.1 < 6"
+    webpack: ^5.12.0
+  peerDependenciesMeta:
+    html-webpack-plugin:
+      optional: true
+  checksum: 827c2c1170f52eaec9d68728d4c3910be5451253ffb24e7dbab35c48acc69c4b4ed6dcea2c29bd62b4cb4569c00eafa4e95d8aa00305656fe9c2a6aeb5415e1e
+  languageName: node
+  linkType: hard
+
 "webpack@npm:^5.74.0":
   version: 5.74.0
   resolution: "webpack@npm:5.74.0"