grafana/scripts/webpack
Jack Westbrook bbfeb8d220
Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983)
* feat(featuremgmt): introduce feature toggle for enabling sri checks

* feat(frontend): use assetSriChecks feature toggle to inject integrity hash into script tags

* chore(webpack): align sri algorithms across dev and prod builds

* docs(featuremgmt): update assetSriChecks to pass CI

* docs(featuremgmt): fix more spelling complaints with assetSriChecks

* Add crossorigin attribute

* chore(webpack): add subresource-integrity plugin

* build(webpack): wrap webpack jsonp loader integrity checks in feature flag checks

* revert(index.html): remove crossorigin attribute if assertSriChecks is disabled

---------

Co-authored-by: Kristian Bremberg <kristian.bremberg@grafana.com>
2025-03-04 11:56:35 +01:00
..
plugins Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983) 2025-03-04 11:56:35 +01:00
dependencies.js Chore: ESlint import order (#44959) 2022-04-22 14:33:13 +01:00
env-util.js Chore: Prevent direct path imports from workspace grafana packages (#98940) 2025-01-15 15:47:44 +02:00
postcss.config.js Chore: Remove postcss-browser-reporter (#39409) 2021-09-20 13:38:23 +02:00
sass.rule.js Chore: silence sass warnings since we're going to remove sass anyway (#96530) 2024-11-15 12:18:58 +02:00
webpack.common.js Update dependency typescript to v5.7.2 (#93749) 2025-01-09 15:20:45 +00:00
webpack.dev.js Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983) 2025-03-04 11:56:35 +01:00
webpack.prod.js Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983) 2025-03-04 11:56:35 +01:00
webpack.stats.js Frontend: Add build:stats for analysing bundles (#94729) 2024-12-09 12:09:32 +01:00