Open RobinClowers opened 1 year ago
Thanks for reporting. Could you add some details about what problem this plugin solves?
We would discuss this issue next week and might need more feedback on this from more persons.
Sub resource integrity. Quite a big one for enterprises with complex compliance requirements.
A simple workaround might by trying to change the hook from tapPromise to tapAsync.
I believe some tappable types are still WIP, even tho hook might exist the tap method may not yet.
Yeah, what @ScriptedAlchemy said, it's a plugin for adding Content Security Policy meta tags to the document head. I just realized I put the wrong package name in the description, I've updated it and included a link to the package. Let me know if there are any more details I can provide, happy to help.
Have you tried the sub-resource integrity webpack plugin? It might already be working.
Im pretty sure if you change the plugin code to tapAsync, it would work. Can you edit it in node modules and try tap or tapAsync and let us know what happens?
@ScriptedAlchemy This error actually comes from webpack-subresource-integrity
plugin. I tried switching to tapAsync
, but the problem is the whole beforeCompile hook is missing.
This is the line where it fails: https://github.com/waysact/webpack-subresource-integrity/blob/914fdd9dd5982b4f52782c55eb6cb33fea5861cc/webpack-subresource-integrity/src/hooks.ts#L65
beforeCompile is supported and now is blocked by #3090
This issue has been automatically marked as stale because it has not had recent activity. If this issue is still affecting you, please leave any comment (for example, "bump"). We are sorry that we haven't been able to prioritize it yet. If you have any new additional information, please include it with your comment!
we also need to support webpack.DefinePlugin, cc @ahabhgk
I just tried with 0.3.8 and it looks like there has been some progress, but unfortunately there are still more compiler hooks that aren't supported that webpack-subresource-integrity
relies on:
Even if these were all supported @melloware/csp-webpack-plugin relies on the HtmlWebpackPlugin to inject the tag, so I assume it would only work if we didn't use the builtin html support of rspack.
I also noticed https://github.com/web-infra-dev/rspack/issues/4381 is tracking webpack-subresource-integrity
compatibility directly.
Alternatively, are there any plans for an native rspack CSP solution? I'm not married to the setup I have now, but dropping CSP is not an option either.
This issue has been automatically marked as stale because it has not had recent activity. If this issue is still affecting you, please leave any comment (for example, "bump"). We are sorry that we haven't been able to prioritize it yet. If you have any new additional information, please include it with your comment!
still blocked by #4381
This issue has been automatically marked as stale because it has not had recent activity. If this issue is still affecting you, please leave any comment (for example, "bump"). We are sorry that we haven't been able to prioritize it yet. If you have any new additional information, please include it with your comment!
bump
bump
@LingyuCoder can we support this feature in rspackHtmlPlugin?
System Info
System: OS: macOS 13.3 CPU: (10) arm64 Apple M1 Max Memory: 1.38 GB / 64.00 GB Shell: 5.2.15 - /opt/homebrew/bin/bash Binaries: Node: 18.15.0 - ~/.volta/tools/image/node/18.15.0/bin/node Yarn: 1.22.17 - ~/.volta/tools/image/yarn/1.22.17/bin/yarn npm: 9.5.0 - ~/.volta/tools/image/node/18.15.0/bin/npm Browsers: Chrome: 111.0.5563.146 Edge: 112.0.1722.34 Firefox: 111.0.1 Safari: 16.4 npmPackages: @rspack/cli: ^0.1.6 => 0.1.6
Details
Rspack seems to be incompatible with the @melloware/csp-webpack-plugin package.
It appears to fail on this line:
Reproduce link
No response
Reproduce Steps
npm i -D @melloware/csp-webpack-plugin
npm run build