Add subresource integrity for JS and CSS assets (#15096)

Fix #2744
2020-11-06 11:56:31 +01:00 · 2020-11-06 11:56:31 +01:00 · 9b1f2a4b61
commit 9b1f2a4b61
parent 68d4b2b83e
31 changed files with 79 additions and 39 deletions
--- a/app/views/media/player.html.haml
+++ b/app/views/media/player.html.haml
@ -1,6 +1,6 @@
 - content_for :header_tags do
  = render_initial_state
-  = javascript_pack_tag 'public', integrity: true, crossorigin: 'anonymous'
+  = javascript_pack_tag 'public', crossorigin: 'anonymous'

 - if @media_attachment.video?
  = react_component :video, src: @media_attachment.file.url(:original), preview: @media_attachment.thumbnail.present? ? @media_attachment.thumbnail.url : @media_attachment.file.url(:small), blurhash: @media_attachment.blurhash, width: 670, height: 380, editable: true, detailed: true, inline: true, alt: @media_attachment.description do