sebastian-software / edge

The Lerna Repository for Edge Platform
Apache License 2.0
33 stars 7 forks source link

Add overall SRI (Subresource Integrity) support to verify CDNs delivering the correct files #13

Open swernerx opened 6 years ago

swernerx commented 6 years ago

This is mainly a security feature which verifies whether files delivered through any 3rd party server math the checksums detected during deployment.

This requires adjustments to the chunk flushing in our React server as well a possible some tweaks for dynamic chunk loading in Webpack e.g. when using import().

See also: https://github.com/faceyspacey/webpack-flush-chunks/issues/10#issuecomment-310340495