From 2dc3e6f3a726a161ded050be16b706d8ec877b08 Mon Sep 17 00:00:00 2001
From: Hugo SUBTIL <ext.sopra.husubtil@grandlyon.com>
Date: Thu, 6 May 2021 10:01:12 +0200
Subject: [PATCH] feat: add subresource-integrity

---
 package.json   | 4 ++--
 src/index.html | 6 +++++-
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index c47b20936..4877d9f44 100644
--- a/package.json
+++ b/package.json
@@ -4,8 +4,8 @@
   "scripts": {
     "ng": "ng",
     "start": "ng serve --configuration=fr --proxy-config proxy.conf.json",
-    "build:prod": "ng build --prod --configuration=production,fr --output-path=dist",
-    "build:dev": "ng build --prod --configuration=fr --output-path=dist",
+    "build:prod": "ng build --prod --configuration=production,fr --output-path=dist --subresource-integrity",
+    "build:dev": "ng build --prod --configuration=fr --output-path=dist --subresource-integrity",
     "test": "ng test",
     "lint": "ng lint",
     "e2e": "ng e2e",
diff --git a/src/index.html b/src/index.html
index 07150f095..6649c5b9e 100644
--- a/src/index.html
+++ b/src/index.html
@@ -47,7 +47,11 @@
       rel="stylesheet"
       href="https://cdn.jsdelivr.net/npm/leaflet.locatecontrol@0.72.0/dist/L.Control.Locate.min.css"
     />
-    <script src="https://openlayers.org/en/v4.6.5/build/ol.js" type="text/javascript"></script>
+    <script
+      src="https://openlayers.org/en/v4.6.5/build/ol.js"
+      integrity="sha256-VC4mGHI/SvHwjGxD7oBob8kzwzbHy1MsgiCcrR5SbHg= sha384-/UhW2uuxuN/GcGRUL3CJA5ftmLinDAWEV5khyWrOKJ04xesUihAW/UNXf4VMvAuS sha512-WZO+8H/x0lzH/hIMaAan179GT2iyGNzbEA9nCGS7ju1jPPkUUr7uTHJGh3kxVG2GhDlxItuH1gbmFzHZiMul1Q=="
+      crossorigin="anonymous"
+    ></script>
     <script src="https://embed.typeform.com/embed.js"></script>
   </head>
   <body>
-- 
GitLab