gatsby-plugin-sri

A Gatsby plugin to add Subresource Integrity (SRI) to your generated script tags.

<script src="/webpack-runtime-cde5506958f1afc4d89e.js"></script>

becomes

<script src="/webpack-runtime-cde5506958f1afc4d89e.js" integrity="sha512-uxm8lZAnmLGO3hMOyYy7HFgEGJgDdXwZR+Pdyt2f3AKbgVZ706v9YyI4t9veKTirqfdLGvPVDsDkHEWmWsECRA=="></script>

Installation

With npm:

npm install --save gatsby-plugin-sri

Or with Yarn:

yarn add gatsby-plugin-sri

Usage

In your gatsby-config.js file add:

module.exports = {
  plugins: [
    {
      resolve: 'gatsby-plugin-sri',
      options: {
        hash: 'sha512', // 'sha256', 'sha384' or 'sha512' ('sha512' = default)
        crossorigin: false // Optional
      }
    }
  ]
}