grafana/scripts
Jack Westbrook bbfeb8d220
Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983)
* feat(featuremgmt): introduce feature toggle for enabling sri checks

* feat(frontend): use assetSriChecks feature toggle to inject integrity hash into script tags

* chore(webpack): align sri algorithms across dev and prod builds

* docs(featuremgmt): update assetSriChecks to pass CI

* docs(featuremgmt): fix more spelling complaints with assetSriChecks

* Add crossorigin attribute

* chore(webpack): add subresource-integrity plugin

* build(webpack): wrap webpack jsonp loader integrity checks in feature flag checks

* revert(index.html): remove crossorigin attribute if assertSriChecks is disabled

---------

Co-authored-by: Kristian Bremberg <kristian.bremberg@grafana.com>
2025-03-04 11:56:35 +01:00
..
build CI: Remove unused release_publisher scripts (#101019) 2025-02-20 12:00:15 -06:00
cli Chore: Remove betterer:merge and revert previous changes to betterer:stats (#98609) 2025-02-12 17:14:43 +02:00
codemods
docs Fix typo in dashboard-variables destinations and also use Grafana Cloud docs if they exist (#89244) 2024-06-14 17:27:22 +01:00
drone Chore: Update base alpine docker image (#101320) 2025-02-25 16:23:28 -07:00
go/bin
go-workspace Chore: Tweak order of update-workspace script (#98491) 2025-01-03 23:47:41 +02:00
grafana-server E2E: Add PDF/CSV/Image comparison tasks (#99104) 2025-02-07 15:46:32 +01:00
helpers
modowners
openapi3
tests
verify-repo-update
webpack Feature: Introduce subresource integrity checks (SRI) for frontend assets (#100983) 2025-03-04 11:56:35 +01:00
benchmark-access-control.sh
check-breaking-changes.sh Fix levitate detect breaking changes pipeline not sending slack messages (#94482) 2024-10-09 17:43:30 +02:00
ci-frontend-metrics.sh
ci-job-failed.sh
ci-job-started.sh
ci-job-succeeded.sh
circle-test-backend.sh
circle-test-cache-servers.sh
circle-test-frontend.sh
circle-test-mysql.sh
circle-test-postgres.sh
clean-git-or-error.sh
cleanup-husky.sh
generate-a11y-report.sh
generate-alerting-rtk-apis.ts Alerting: Consume k8s API for notification policies tree (#96147) 2024-11-26 13:46:39 +00:00
generate-rtk-apis.ts Query Library: Move backend to enterprise (#100371) 2025-02-14 11:05:03 +00:00
import_many_dashboards.sh Schema V2: Adjust quick_ranges in time settings and remove time_options (#100135) 2025-02-12 19:23:09 +00:00
levitate-parse-json-report.js Plugins: Fix levitate detailed report and improve error treatment (#91617) 2024-08-08 11:20:58 +02:00
levitate-show-affected-plugins.js Plugins: Fix big query credentials and improve detailed report errors (#92373) 2024-08-26 13:46:24 +02:00
list-release-artifacts.sh
mixin-check.sh
prepare-npm-package.js Grafana UI: Expose unstable entrypoint (#97080) 2025-03-04 09:55:41 +01:00
process-specs.ts API client generation: Add `verify-api-clients` step to drone (#99987) 2025-02-04 09:13:44 +00:00
protobuf-check.sh
publish-npm-packages.sh E2E Selectors: Add 'modified' dist-tag when release includes actual changes (#93813) 2024-10-23 15:47:50 +02:00
stripnulls.sh
tag_release.sh
trigger_docker_build.sh
trigger_grafana_packer.sh
trigger_windows_build.sh
validate-npm-packages.sh Grafana UI: Expose unstable entrypoint (#97080) 2025-03-04 09:55:41 +01:00