webpack-subresource-integrity overwrites integrity values on explicitly set externals

I’m using webpack-subresource-integrity to set integrity hashs on local resources. This works fine. At the same time I’m defining externals (including integrity hash) manually with html-webpack-externals-plugin like this:

    new HtmlWebpackExternalsPlugin({
      externals: [
        {
          module: 'jquery',
          entry: {
            path: 'https://code.jquery.com/jquery-3.2.1.js',
            attributes: {
              integrity: 'sha256-DZAnKJ/6XZ9si04Hgrsxu/8s717jcIzLy3oi35EouyE=',
              crossorigin: 'anonymous',
            },
          },
          global: 'jQuery',
        },
      ],
    })

However, the integrity attribute get’s overwritten by webpack-subresource-integrity with null, resulitng in this:

<script type="text/javascript" src="https://code.jquery.com/jquery-3.2.1.js" integrity="null" crossorigin="anonymous"></script>

Is there anyway to prevent this unwanted behavior?

[r0bs]

Hey @jscheid ! Thanks for the fix, solves the issue for me.

Now explicitly set integrity attributes on external assets don’t get overwritten. However, if one decides to purposefully omit the integrity attribute on an external asset, integrity="null" will still be added to the script tag, rendering the script useless. Is there a rationale behind this?

[jscheid]

Fix released in 1.3.1.