question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Failed to find a valid digest in the 'integrity' attribute for resource

See original GitHub issue

I’m trying to add Offen to my sites and I’m hitting some blocks:

My setup

I pulled the latest version of Offen from docker hub.

offen.mttaudio.com ---> nginx --> offen docker image
www-pre.mttaudio.com -> nginx --> web app process

Errors

  1. www-pre.mttaudio.com/:1 Refused to display 'https://offen.mttaudio.com/vault/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

If I remove the X-Frame-Options completely this goes away, is there a way for me to keep this?

  1. If I do remove the X-Frame-Options header, then Offen loads but throws these two errors (they also come out when visiting the Offen Auditorium)
Failed to find a valid digest in the 'integrity' attribute for resource 'https://offen.mttaudio.com/vault/vendor-cdc94dde8f.js' with computed SHA-256 integrity '7h+DJVtMpNr1FVMcCV2spIwSjnKvTKLBR8VCunEO6IE='. The resource has been blocked.

Failed to find a valid digest in the 'integrity' attribute for resource 'https://offen.mttaudio.com/vault/index-405319a057.js' with computed SHA-256 integrity 'EUQKQfu5yNZ7NP1VpXeomJrtWqIK1E3GMHeGFRUcC+s='. The resource has been blocked.

Issue Analytics

  • State:open
  • Created 3 years ago
  • Comments:11 (6 by maintainers)

github_iconTop GitHub Comments

1reaction
m90commented, Feb 25, 2021

Ok, so this is really really strange and I’m a little stumped. I’m on Linux where I can use Offen installed on https://www-pre.mttaudio.com/ just fine across all browsers. When I use Browserstack however I can reproduce the error in both MacOS and Windows. What makes no sense however is that I can use the version of Offen that is installed on https://www.offen.dev (which is not exactly 0.3.0 but very close and no changes in the hashing mechanism since then) just fine in these Browserstack versions as well as on my local machine. What currently makes no sense to me at all is that the error message is talking about a different hash algorithm and uses a different hash value than what is on the script tag?

Your offen.env looks just fine.

I will try to dig into this further and will let you know what I come up with once I can reproduce the issue myself.

0reactions
TommasoAmicicommented, Feb 27, 2021

As I said in the Cloudflare thread

Having Rocket Loader enabled? If yes, try disabling it.

Rocket Loader was disabled

Moreover, check and try disabling CSS and JS Minify at Cloudflare dashboard.

I did have CSS and JS minify active, but after disabling the option nothing changed

Read more comments on GitHub >

github_iconTop Results From Across the Web

Failed to find a valid digest in the 'integrity' attribute for ...
1 · Paul brings up an important point - ensure all files on the server gets updated, and is also not stuck in...
Read more >
Blazor wasm error Failed to find a valid digest in the 'integrity ...
I have a blazor wasm app deployed to an app service but i'm getting the following error: Failed to find a valid digest...
Read more >
Failed to find a valid digest in the 'integrity' attribute.
You have a Content Security Policy[^] on your site which is blocking you from loading scripts without a valid subresource integrity[^] ...
Read more >
Unknown error occurred while trying to verify Failed to find a ...
Unknown error occurred while trying to verify Failed to find a valid digest in the 'integrity' attribute for resource wth computed SHA-256 integrity....
Read more >
Blazor - Failed to find a valid digest in the 'integrity' attribute
boot.json file. For cached files with a matching hash, Blazor uses the cached files. Otherwise, files are requested from the server. After a ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found