EPMRPP-86851 || Implement SRI for scripts (#3610)

reportportal · Oct 17, 2023 · 841163a · 841163a
1 parent e1eec39
commit 841163a
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 5 deletions.
diff --git a/app/package-lock.json b/app/package-lock.json
diff --git a/app/package.json b/app/package.json
@@ -102,6 +102,7 @@
     "@babel/preset-env": "7.16.8",
     "@babel/preset-react": "7.16.7",
     "@pmmmwh/react-refresh-webpack-plugin": "0.5.10",
+    "@sowtame/webpack-subresource-integrity": "2.0.0",
     "@types/jest": "24.9.0",
     "@wojtekmaj/enzyme-adapter-react-17": "^0.6.7",
     "axios-mock-adapter": "1.17.0",

diff --git a/app/webpack/prod.config.js b/app/webpack/prod.config.js
@@ -18,13 +18,14 @@ const path = require('path');
 const MiniCssExtractPlugin = require('mini-css-extract-plugin');
 const CompressionPlugin = require('compression-webpack-plugin');
 // const { SubresourceIntegrityPlugin } = require('webpack-subresource-integrity');
+const { SubresourceIntegrityPlugin } = require('@sowtame/webpack-subresource-integrity');
 const TerserPlugin = require('terser-webpack-plugin');
 const CssMinimizerPlugin = require('css-minimizer-webpack-plugin');
 
 module.exports = {
   mode: 'production',
   output: {
-    // crossOriginLoading: 'anonymous',
+    crossOriginLoading: 'anonymous',
   },
   module: {
     rules: [
@@ -69,10 +70,11 @@ module.exports = {
       minRatio: 0.8,
     }),
     // TODO: wait until https://github.com/waysact/webpack-subresource-integrity/issues/176 will be resolved
-    // new SubresourceIntegrityPlugin({
-    //   hashFuncNames: ['sha256', 'sha384'],
-    //   hashLoading: 'lazy',
-    // }),
+    // TODO we are forced to use it because of webpack-subresource-integrity has not introduced the fix yet
+    new SubresourceIntegrityPlugin({
+      hashFuncNames: ['sha256', 'sha384'],
+      hashLoading: 'lazy',
+    }),
   ],
   optimization: {
     minimize: true,