Add subresource integrity to embed

trilitech · Nov 5, 2024 · 8113b63 · 8113b63
1 parent 1df1f1f
commit 8113b63
Show file tree

Hide file tree

Showing 7 changed files with 15 additions and 0 deletions.
diff --git a/apps/embed-iframe-mainnet/package.json b/apps/embed-iframe-mainnet/package.json
@@ -28,6 +28,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }
diff --git a/apps/embed-iframe-mainnet/src/vite-env.d.ts b/apps/embed-iframe-mainnet/src/vite-env.d.ts
@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />
diff --git a/apps/embed-iframe-mainnet/vite.config.ts b/apps/embed-iframe-mainnet/vite.config.ts
@@ -3,6 +3,7 @@ import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
 import path from "path";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -15,6 +16,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

diff --git a/apps/embed-iframe/package.json b/apps/embed-iframe/package.json
@@ -57,6 +57,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }
diff --git a/apps/embed-iframe/src/vite-env.d.ts b/apps/embed-iframe/src/vite-env.d.ts
@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />
diff --git a/apps/embed-iframe/vite.config.ts b/apps/embed-iframe/vite.config.ts
@@ -2,6 +2,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -14,6 +15,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml