github/hexo-theme-next
1
0
Fork 0
mirror of https://github.com/next-theme/hexo-theme-next.git synced 2026-09-13 06:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Omit integrity hashes for local vendor plugins (#964)

Browse Source
This commit is contained in:
Philippe Ivaldi 2026-06-28 01:57:07 +02:00 committed by GitHub
parent 1746ed135c
commit 0bfb454a74
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
scripts/events/lib/vendors.js
View File

@ -49,7 +49,13 @@ module.exports = hexo => {
});
vendors[key] = {
url : links[plugins] || links.cdnjs,
integrity: value.integrity
// Subresource Integrity only adds value for cross-origin CDN assets.
// The hashes in _vendors.yml are computed for the CDN builds; when
// self-hosting (`plugins: local`) the files are served same-origin and
// may differ byte-for-byte from those builds (e.g. a newer bundled
// version), so a hardcoded hash would make the browser block them.
// Omit integrity for local assets.
integrity: plugins === 'local' ? undefined : value.integrity
};
}
};