Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
Subresource Integrity in production builds
See original GitHub issueSubresource Integrity (SRI) is a security feature that enables browsers to verify that files they fetch (for example, from a CDN) are delivered without unexpected manipulation. It works by allowing you to provide a cryptographic hash that a fetched file must match.
<script
src="https://example.com/example-framework.js"
integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC"
crossorigin="anonymous"
></script>
It should probably be implemented similarly to the hash generation for cache busting.
Source: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity
Issue Analytics
- State:
- Created 7 years ago
- Reactions:2
- Comments:9 (5 by maintainers)
Top Results From Across the Web
Securing Your Website With Subresource Integrity - CSS-Tricks
Solution: Subresource Integrity (SRI). SRI is a security policy that prevents the loading of resources that don't match an expected hash.
Read more >Subresource Integrity - W3C
Abstract. This specification defines a mechanism by which user agents may verify that a fetched resource has been delivered without ...
Read more >Subresource Integrity - Web security | MDN
Subresource Integrity (SRI) is a security feature that enables browsers to verify that resources they fetch (for example, from a CDN) are ...
Read more >How to add subresources integrity with Angular appShell build
Ok, I found a way by editing angular.json : { "$schema": "./node_modules/@angular/cli/lib/config/schema.json", "version": 1, ...
Read more >parcel-plugin-subresource-integrity - npm
Integrity attributes are only added in production (i.e. when running parcel build) as it tends to get out of sync easily in watch...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
@gaearon Cool, it should not be that hard. Let’s see if I can come up with something.
Fixed via #1176.