Skip to content

subresourceIntegrity gives a warning that i should use [contenthash] with realContentHash = true. #22439

Closed
@jcompagner

Description

@jcompagner

when i am building with ng build --configuration production --subresourceIntegrity=true

so enabling subresource integrity i get this warning:

Warning: webpack-subresource-integrity: Using [hash], [fullhash], [modulehash], or [chunkhash] is dangerous with SRI. The same is true for [contenthash] when realContentHash is disabled. Use [contenthash] and ensure realContentHash is enabled. See the README for more information.

So if i want to enabled contenthash with realContentHash to true (which seems to be default if i read the the docs correctly:

https://github.com/waysact/webpack-subresource-integrity/tree/main/webpack-subresource-integrity#readme

but as far as i know this configuration is quite hidden away ? we only have that flag?
But is angular/cli then overwriting that default?

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions