Add subresource integrity

apps/desktop/package.json

@@ -150,6 +150,7 @@
     "vite": "^5.4.8",
     "vite-plugin-checker": "^0.8.0",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "zod": "^3.23.8",
     "@hookform/resolvers": "^3.9.0"
   },

apps/desktop/vite.config.ts

@@ -4,6 +4,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig, loadEnv } from "vite";
 import { checker } from "vite-plugin-checker";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
+import sri from "vite-plugin-sri";
 
 // eslint-disable-next-line import/no-unused-modules
 export default ({ mode }: { mode: "development" | "production" }) => {
@@ -39,6 +40,7 @@ export default ({ mode }: { mode: "development" | "production" }) => {
             useFlatConfig: false,
           },
         }),
+      sri({ algorithm: "sha384" }),
     ].filter(Boolean),
     build: {
       outDir: "build",

apps/embed-iframe-mainnet/package.json

@@ -28,6 +28,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }

apps/embed-iframe-mainnet/src/vite-env.d.ts

@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />

apps/embed-iframe-mainnet/vite.config.ts

@@ -3,6 +3,7 @@ import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
 import path from "path";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -15,6 +16,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

apps/embed-iframe/package.json

@@ -57,6 +57,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }

apps/embed-iframe/src/vite-env.d.ts

@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />

apps/embed-iframe/vite.config.ts

@@ -2,6 +2,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -14,6 +15,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

apps/web/package.json

@@ -126,6 +126,7 @@
     "typescript": "^5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   },
   "packageManager": "[email protected]"

apps/web/vite.config.ts

@@ -2,6 +2,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
+import sri from "vite-plugin-sri";
 
 // https://vitejs.dev/config/
 export default defineConfig({
@@ -32,6 +33,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   build: {
     emptyOutDir: false,

global.d.ts

@@ -12,3 +12,5 @@ declare namespace NodeJS {
     readonly PUBLIC_URL: string;
   }
 }
+
+declare module 'vite-plugin-sri';

packages/typescript-config/tsconfig.json

@@ -15,6 +15,6 @@
     "isolatedModules": true,
     "noEmit": true,
     "jsx": "react-jsx",
-    "customConditions": ["@umami/source"]
+    "customConditions": ["@umami/source"],
   }
 }