Integrity

support
1

Is the + supposed to be there? Looks like it is escaped.

integrity="sha256-y+TfdhEVwthoVFNCWOZuPkFGiHzyMLyTrKxGXc6js0o="
2

For the record, this isn’t anything new (i.e., not a bug in v0.120.0).
https://github.com/gohugoio/hugo/issues/10025

Escaping the plus sign to an HTML entity is not a problem; Go’s html/template package is doing this. Test in your browser console; no errors.

3

Alright. Will explore the printf method

4

Will explore the printf method

You’ll need to pass it through safeHTMLAttr…

<element {{- printf " some-attribute=%q" $value | safeHTMLAttr}}>
5

Thanks. Do local/same-origin resources really need the integrity check btw?

6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.