[SRI] review note 1

http://w3c.github.io/webappsec/specs/subresourceintegrity/

3.1 Integrity metadata

> For example, given a script resource containing only the string
“alert(‘Hello, world.’);”,

The quotation marks here are fancy, they shouldn't be.

> an author might choose SHA-256 as a hash function.