jantimon/favicons-webpack-plugin

Incompatible with webpack-subresource-integrity

Open

#279 创建于 2021年7月29日

在 GitHub 查看
 (3 评论) (0 反应) (0 负责人)JavaScript (1,198 star) (226 fork)batch import
help wantedwontfix

描述

Current behaviour 💣

When using favicons-webpack-plugin in webpack@^5.0.0, webpack-subresource-integrity throws an error.

Expected behaviour ☀️

favicons-webpack-plugin should complete even while using webpack-subresource-integrity; preferably with included integrity hashes.

Reproduction Example 👾

Setup latest webpack with favicons-webpack-plugin and webpack-subresource-integrity.

Environment 🖥

Node.js v16.5.0 linux 5.13.5-arch1-1

贡献者指南

技术栈
javascriptnodejs
领域
build systemtooling
议题类型
bug
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
half day
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
needs investigation
前置要求
Understanding of webpack plugin systemFamiliarity with html webpack pluginKnowledge of subresource integrity
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
30
研究方向
Investigate the conflict between favicons webpack plugin and webpack subresource integrity (SRI). The issue likely stems from how favicons webpack plugin modifies HTML assets via html webpack plugin, which may interfere with SRI hash injection. Start by reviewing the source code of favicons webpack plugin (especially how it integrates with html webpack plugin) and the SRI plugin's documentation/issue tracker. Look for any known incompatibilities or hooks that might be missing. Consider reproducing the issue with a minimal webpack config to pinpoint the exact error. The maintainers may need to adjust asset handling to ensure SRI hashes are computed correctly.