diff --git a/src/webui/www/.htmlvalidate.json b/src/webui/www/.htmlvalidate.json
deleted file mode 100644
index 5dae7718d..000000000
--- a/src/webui/www/.htmlvalidate.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "extends": [
-    "html-validate:recommended"
-  ],
-  "rules": {
-    "input-missing-label": "error",
-    "long-title": "off",
-    "no-inline-style": "off",
-    "no-missing-references": "error",
-    "prefer-button": "off"
-  }
-}
diff --git a/src/webui/www/.htmlvalidate.mjs b/src/webui/www/.htmlvalidate.mjs
new file mode 100644
index 000000000..b39ef1db3
--- /dev/null
+++ b/src/webui/www/.htmlvalidate.mjs
@@ -0,0 +1,20 @@
+import { defineConfig } from "html-validate";
+
+export default defineConfig({
+    extends: [
+        "html-validate:recommended"
+    ],
+    rules: {
+        "input-missing-label": "error",
+        "long-title": "off",
+        "no-inline-style": "off",
+        "no-missing-references": "error",
+        "prefer-button": "off",
+        "require-sri": [
+            "error",
+            {
+                target: "crossorigin"
+            }
+        ]
+    }
+});