subresource integrity checking (#103)

Author: brandold

source/web/package.json

@@ -29,7 +29,8 @@
     "babel-eslint": "^10.1.0",
     "eslint": "^6.7.2",
     "eslint-plugin-vue": "^6.2.2",
-    "vue-template-compiler": "^2.6.11"
+    "vue-template-compiler": "^2.6.11",
+    "webpack-subresource-integrity": "^1.3.4"
   },
   "eslintConfig": {
     "root": true,

source/web/vue.config.js

@@ -0,0 +1,19 @@
+
+var SriPlugin = require('webpack-subresource-integrity');
+
+module.exports = {
+  configureWebpack: {
+    output: {
+      crossOriginLoading: 'anonymous',
+    },
+    plugins: [
+      new SriPlugin({
+        hashFuncNames: ['sha256', 'sha384'],
+        enabled: true
+      }),
+    ],
+    performance: {
+      hints: false
+    }
+  }
+};