Failed to find a valid digest in the 'integrity' attribute for resource

I’m trying to add Offen to my sites and I’m hitting some blocks:

My setup

I pulled the latest version of Offen from docker hub.

offen.mttaudio.com ---> nginx --> offen docker image
www-pre.mttaudio.com -> nginx --> web app process

Errors

1. www-pre.mttaudio.com/:1 Refused to display 'https://offen.mttaudio.com/vault/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

If I remove the X-Frame-Options completely this goes away, is there a way for me to keep this?

1. If I do remove the X-Frame-Options header, then Offen loads but throws these two errors (they also come out when visiting the Offen Auditorium)

Failed to find a valid digest in the 'integrity' attribute for resource 'https://offen.mttaudio.com/vault/vendor-cdc94dde8f.js' with computed SHA-256 integrity '7h+DJVtMpNr1FVMcCV2spIwSjnKvTKLBR8VCunEO6IE='. The resource has been blocked.

Failed to find a valid digest in the 'integrity' attribute for resource 'https://offen.mttaudio.com/vault/index-405319a057.js' with computed SHA-256 integrity 'EUQKQfu5yNZ7NP1VpXeomJrtWqIK1E3GMHeGFRUcC+s='. The resource has been blocked.

[m90]

Ok, so this is really really strange and I’m a little stumped. I’m on Linux where I can use Offen installed on https://www-pre.mttaudio.com/ just fine across all browsers. When I use Browserstack however I can reproduce the error in both MacOS and Windows. What makes no sense however is that I can use the version of Offen that is installed on https://www.offen.dev (which is not exactly 0.3.0 but very close and no changes in the hashing mechanism since then) just fine in these Browserstack versions as well as on my local machine. What currently makes no sense to me at all is that the error message is talking about a different hash algorithm and uses a different hash value than what is on the script tag?

Your offen.env looks just fine.

I will try to dig into this further and will let you know what I come up with once I can reproduce the issue myself.

[TommasoAmici]

As I said in the Cloudflare thread

Having Rocket Loader enabled? If yes, try disabling it.

Rocket Loader was disabled

Moreover, check and try disabling CSS and JS Minify at Cloudflare dashboard.

I did have CSS and JS minify active, but after disabling the option nothing changed