feat(csp): SRI hashes for SSG mode

[vejja]

Types of changes

• Bug fix (a non-breaking change which fixes an issue)
• New feature (a non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Description

This PR significantly improves our support of Strict CSP in SSG mode by whitelisting external resources based on their integrity hash.

Previously, in SSG mode Nuxt Security was only able to compute hashes of inline elements. With this PR, Nuxt Security is now able to insert the hashes of external elements.

This PR builds upon PR #285, which introduced Subresource Integrity support by Nuxt Security, to collect the SRI hashes of external resources and use them for CSP setup.

The module parses all valid external links, and allocates them to the relevant CSP section in accordance with the HTML WHATWG standard.

This PR closes Issue #279.

Checklist:

• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes (if not applicable, please state why)

A new test suite for ssg is introduced.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
nuxt-security	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Nov 9, 2023 0:59am

[Baroshem]

Hey @vejja

I am not fast enough to review your amazing work! But I will do my best to not be very late 😃

I have merged the initial SRI Pr. Could you please resolve conflicts here so that I could review it and test it? :)

[vejja]

Hey @vejja

I am not fast enough to review your amazing work! But I will do my best to not be very late 😃

I have merged the initial SRI Pr. Could you please resolve conflicts here so that I could review it and test it? :)

Yes, done now !

[Baroshem]

Awesome thank you! Really nice work! 🚀