sw5-scn-subresource-integrity

Plugin for Shopware 5 providing Subresource Integrity for resources.

License: AGPLv3 – TLDRLegal

Restrictions

• Only supports responsive theme. (You can however still use it manually)

Installation

cd <instance>/engine/Shopware/Plugins/Community/Frontend
git clone https://github.com/screeny05/sw5-scn-subresource-integrity ScnSubresourceIntegrity

Then procede to install the plugin via backend and configure it to your likings.

Usage

This plugin provides an additional smarty-function which can be called via

{$file = <path relative to docroot>}
<script src="{$file}" integrity="{sri file=$file}"></script>

The plugin is able to resolve absolute, relative and remote paths.

Additional Parameters:

Appart from the file-param you can provide the following:

• assign: instead of echoing, the return-value will be assigned to a variable.
• algorithm: takes a string which gets accepted by the hash()-function. Use hash_algos() to get a list of all available algorithms.

Here's a note from the W3C on supported algorithms:

Conformant user agents must support the SHA-256, SHA-384 and SHA-512 cryptographic hash functions for use as part of a request’s integrity metadata and may support additional hash functions.