Merge pull request #2030 from trilitech/add-subresource-integrity-to-web

Add subresource integrity

Author: asiia-trilitech

apps/desktop/package.json

@@ -150,6 +150,7 @@
     "vite": "^5.4.8",
     "vite-plugin-checker": "^0.8.0",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "zod": "^3.23.8",
     "@hookform/resolvers": "^3.9.0"
   },

apps/desktop/vite.config.ts

@@ -4,6 +4,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig, loadEnv } from "vite";
 import { checker } from "vite-plugin-checker";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
+import sri from "vite-plugin-sri";
 
 // eslint-disable-next-line import/no-unused-modules
 export default ({ mode }: { mode: "development" | "production" }) => {
@@ -39,6 +40,7 @@ export default ({ mode }: { mode: "development" | "production" }) => {
             useFlatConfig: false,
           },
         }),
+      sri({ algorithm: "sha384" }),
     ].filter(Boolean),
     build: {
       outDir: "build",

apps/embed-iframe-mainnet/package.json

@@ -28,6 +28,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }

apps/embed-iframe-mainnet/src/vite-env.d.ts

@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />

apps/embed-iframe-mainnet/vite.config.ts

@@ -3,6 +3,7 @@ import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
 import path from "path";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -15,6 +16,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

apps/embed-iframe/package.json

@@ -57,6 +57,7 @@
     "typescript": "5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }

apps/embed-iframe/src/vite-env.d.ts

@@ -0,0 +1,3 @@
+/// <reference path="../../../global.d.ts" />
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />

apps/embed-iframe/vite.config.ts

@@ -2,6 +2,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
+import sri from "vite-plugin-sri";
 
 export default defineConfig({
   base: "./",
@@ -14,6 +15,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   optimizeDeps: {
     esbuildOptions: {

apps/web/package.json

@@ -126,6 +126,7 @@
     "typescript": "^5.5.4",
     "vite": "^5.4.8",
     "vite-plugin-node-polyfills": "^0.17.0",
+    "vite-plugin-sri": "^0.0.2",
     "vite-plugin-svgr": "^4.2.0"
   },
   "packageManager": "pnpm@9.9.0"

apps/web/vite.config.ts

@@ -2,6 +2,7 @@ import react from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
 import { nodePolyfills } from "vite-plugin-node-polyfills";
 import svgr from "vite-plugin-svgr";
+import sri from "vite-plugin-sri";
 
 // https://vitejs.dev/config/
 export default defineConfig({
@@ -32,6 +33,7 @@ export default defineConfig({
         Buffer: true,
       },
     }),
+    sri({ algorithm: "sha384" }),
   ],
   build: {
     emptyOutDir: false,