nuxt-security: Subresource Integrity error

nuxt-security: 1.2.1 nuxt: 3.10.3

n/a

n/a

No SRI error after deploying to Azure Static Web Apps with azure preset with default Nuxt Security’s SRI config.

About this issue

Looking at it right now, I can confirm the issue

@vejja @DamianGlowala I released patch 1.4.3 with a fix for that. Could you check if it works now? 😃

I managed to track the upstream error. Source issue is in nitro@2.9.2: https://github.com/unjs/nitro/issues/2217 Was resolved by https://github.com/unjs/nitro/pull/2239 which was merged in nitro@2.9.3

Could you check this dependency to see if it works now ?

@vejja, really appreciate you looking into this!

Shall I temporarily try overriding nuxt dependency to e.g. 3.10.3 and see whether this works?

It won’t work by only upgrading version Issue in detail is that unstorage’s getItem method can now sometimes return a Buffer instead of an object at https://github.com/Baroshem/nuxt-security/blob/main/src/runtime/nitro/plugins/03-subresourceIntegrity.ts#L25

@DamianGlowala we are facing the regression since Nuxt 3.9.0 Not sure where it comes from, but Buffers are involved in the bug

@Baroshem: the easiest way to fix the issue is to upgrade from Nuxt 3.8 to Nuxt 3.10, are you ok with that?