Vite-subresource-integrity-plugin NPM

vite-subresource-integrity-plugin

Subresource Integrity (SRI) is a security feature that enables browsers to verify that resources they fetch (for example, from a CDN) are delivered without unexpected manipulation. It works by allowing you to provide a cryptographic hash that a fetched resource must match.

Install

npm i vite-subresource-integrity-plugin -D

pnpm add vite-subresource-integrity-plugin -D

yarn add vite-subresource-integrity-plugin -D

Usage

// vite.config.js
import viteSriPlugin from 'vite-subresource-integrity-plugin'

export default {
  plugins: [
    viteSriPlugin({
      algorithm: ['sha256', 'sha384']
    })
  ]
}

Options

param	type	default	description
algorithm	`string` `string[]`	`['sha384']`	Specifying the name of a hash function to be used for calculating integrity hash values
manifest	`boolean` `string`	`true`	If manifest is a true value, the plugin will output a manifest file, and you can pass manifest as a string to set the name of the file
extensions	`string[]`	`['.js', '.css']`	Types of assets the plugin needs to handle
enabled	`boolean`	`true`	Enable or disable plugin

cheerio magic-string

@everything-registry/sub-chunk-3062

1.0.0-alpha.1

7 months ago

1.0.0-alpha.0

7 months ago

0.0.1

7 months ago