Dereku/snappymail
0
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-11-02 10:28:50 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added Subresource Integrity checks from Tachyon

Browse source 
64e23d4fca
This commit is contained in:
the-djmaze 2026-11-01 22:10:41 +01:00
parent 30469ae2dc
commit 124a9c687e
7 changed files with 81 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

8
dev/boot.js
View file

@ -16,12 +16,14 @@ const
toggle(div);
},
loadScript = src => src ? new Promise((resolve, reject) => {
loadScript = (src, integrity) => src ? new Promise((resolve, reject) => {
const script = doc.createElement('script');
script.onload = () => resolve();
script.onerror = () => reject('Failed loading ' + src);
script.src = src;
// script.async = true;
// script.crossorigin = ''; // same as 'anonymous'
if (integrity) { script.integrity = integrity; }
doc.head.append(script);
}) : Promise.reject('src is empty');
@ -146,8 +148,8 @@ if (!navigator.cookieEnabled) {
RL_APP_DATA = appData;
const url = appData.StaticLibsJs,
cb = () => rl.app.bootstart();
loadScript(url)
.then(() => loadScript(url.replace('/libs.', `/${admin?'admin':'app'}.`)))
loadScript(url, appData.StaticLibsJsSri)
.then(() => loadScript(url.replace('/libs.', `/${admin?'admin':'app'}.`), appData.StaticAppJsSri))
.then(() => appData.PluginsLink ? loadScript(qUri(appData.PluginsLink)) : Promise.resolve())
.then(() => rl.app
? cb()