Add subresource integrity for JS and CSS assets (#15096)

Fix #2744
2020-11-06 11:56:31 +01:00
parent 68d4b2b83e
commit 9b1f2a4b61
31 changed files with 79 additions and 39 deletions
--- a/app/views/auth/sessions/two_factor.html.haml
+++ b/app/views/auth/sessions/two_factor.html.haml
@@ -1,7 +1,7 @@
 - content_for :page_title do
  = t('auth.login')

-=javascript_pack_tag 'two_factor_authentication', integrity: true, crossorigin: 'anonymous'
+=javascript_pack_tag 'two_factor_authentication', crossorigin: 'anonymous'

 - if @webauthn_enabled
  = render partial: 'auth/sessions/two_factor/webauthn_form', locals: { hidden: @scheme_type != 'webauthn' }