July 15, 2026

Opt remote scripts out of SRI

Fern adds a Subresource Integrity (SRI) integrity attribute to remote js scripts by default. You can now disable SRI on a specific remote script without turning it off globally. Disable it for scripts that update in place, such as auto-updating or CDN-rolled scripts, which SRI would otherwise block.

1
js:
2
  - url: https://cdn.example.com/a.js
3
    disable-sri: true # rendered without an integrity attribute
4
  - url: https://cdn.example.com/b.js # still gets SRI (default)

Opt-in PII masking for Ask Fern

Ask Fern can now mask personally identifiable information in a user’s question. When enabled, structured PII (emails, phone numbers, SSNs, and credit card numbers) is redacted in the browser and never sent to Fern.

1
ai-search:
2
  mask-pii: true