@oroinc/oro-webpack-config-builder 5.1.0-lts010 → 5.1.0-lts012

package/oro-webpack-config.js

@@ -9,6 +9,8 @@ const EntryPointFileWriter = require('./writer/scss-entry-point-file-writer');
 const LayoutModulesConfigLoader = require('./modules-config/layout-modules-config-loader');
 const LayoutStyleLoader = require('./style/layout-style-loader');
 const MapModulesPlugin = require('./plugin/map/map-modules-plugin');
+const IntegrityFilePlugin = require('./plugin/integrity/integrity-file-plugin');
+const {SubresourceIntegrityPlugin} = require('webpack-subresource-integrity');
 const MiniCssExtractPlugin = require('mini-css-extract-plugin');
 const ModulesConfigLoader = require('./modules-config/modules-config-loader');
 const DynamicImportsFileWriter = require('./writer/dynamic-imports-file-writer');
@@ -26,6 +28,7 @@ const RtlCssWebpackPlugin = require('rtlcss-webpack-plugin');
 const validation = require('./validation');
 const EventEmitter = require('events');
 const ErrorHandler = require('./error-handler');
+const TerserPlugin = require('terser-webpack-plugin');
 
 require('resolve-url-loader');
 
@@ -279,7 +282,8 @@ class ConfigBuilder {
             output: {
                 filename: '[name].js',
                 // Because we use third party libraries 'chunkFilename' should include only [name]
-                chunkFilename: this._getVersionedPath('chunk/[name].js', this.assetVersion)
+                chunkFilename: this._getVersionedPath('chunk/[name].js', this.assetVersion),
+                crossOriginLoading: "anonymous"
             },
             devtool: !env.skipSourcemap && 'inline-cheap-module-source-map',
             mode: 'development',
@@ -289,7 +293,20 @@ class ConfigBuilder {
                     cacheGroups: {
                         defaultVendors: false
                     }
-                }
+                },
+                minimize: this._isProduction,
+                minimizer: [new TerserPlugin({
+                    parallel: true,
+                    extractComments: false,
+                    minify: TerserPlugin.swcMinify,
+                    terserOptions: {
+                        compress: true,
+                        mangle: true,
+                        format: {
+                            comments: false
+                        }
+                    }
+                })]
             },
             resolveLoader: {
                 modules: [
@@ -369,6 +386,10 @@ class ConfigBuilder {
                 new webpack.optimize.MinChunkSizePlugin({
                     minChunkSize: 30000 // Minimum number of characters
                 }),
+                new SubresourceIntegrityPlugin(),
+                new IntegrityFilePlugin({
+                    publicPath: this.resolvedPublicPath
+                }),
                 new AfterWebpackLogsPlugin(
                     stats => this.emitter.emit('build:complete', stats)
                 ),
@@ -418,7 +439,10 @@ class ConfigBuilder {
         // Additional setting for production mode
         if (this._isProduction) {
             webpackConfig.devtool = false;
-            webpackConfig.plugins.push(new CssMinimizerPlugin());
+            webpackConfig.plugins.push(new CssMinimizerPlugin({
+                parallel: true,
+                minify: CssMinimizerPlugin.esbuildMinify
+            }));
         }
 
         return webpackConfig;

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@oroinc/oro-webpack-config-builder",
-  "version": "5.1.0-lts010",
+  "version": "5.1.0-lts012",
   "author": "Oro, Inc (https://www.oroinc.com)",
   "license": "MIT",
   "description": "An integration of OroPlatform based applications with the Webpack.",
   "main": "oro-webpack-config.js",
   "dependencies": {
+    "@swc/core": "^1.11.8",
     "@babel/core": "~7.21.3",
     "@babel/plugin-transform-runtime": "~7.21.0",
     "@babel/preset-env": "~7.21.2",
@@ -17,6 +18,7 @@
     "deepmerge": "~4.3.1",
     "exports-loader": "~4.0.0",
     "expose-loader": "~4.1.0",
+    "esbuild-loader": "^4.3.0",
     "file-loader": "~6.2.0",
     "html-webpack-plugin": "~5.5.0",
     "imports-loader": "~4.0.1",
@@ -35,6 +37,7 @@
     "schema-utils": "^4.0.0",
     "style-loader": "~3.3.1",
     "terser": "~5.17.1",
+    "terser-webpack-plugin": "^5.3.13",
     "text-loader": "0.0.1",
     "underscore": "1.13.*",
     "url-loader": "~4.1.1",
@@ -43,6 +46,7 @@
     "webpack-cli": "~5.0.0",
     "webpack-dev-server": "^4.11.1",
     "webpack-merge": "~5.8.0",
+    "webpack-subresource-integrity": "^5.2.0-rc.1",
     "wildcard": "~2.0.0"
   }
 }

package/plugin/integrity/integrity-file-plugin.js

@@ -0,0 +1,42 @@
+const { createHash } = require('crypto');
+const { Compilation, sources } = require('webpack');
+const fs = require('fs').promises;
+const path = require('path');
+
+class IntegrityFilePlugin {
+    constructor({fileName = 'integrity.json', publicPath = '', algorithm = 'sha384'} = {}) {
+        this.fileName = fileName;
+        this.publicPath = publicPath;
+        this.algorithm = algorithm;
+    }
+
+    apply(compiler) {
+        compiler.hooks.thisCompilation.tap('IntegrityFilePlugin', (compilation) => {
+            compilation.hooks.processAssets.tapPromise(
+                { name: 'SubresourceIntegrityPlugin', stage: Compilation.PROCESS_ASSETS_STAGE_OPTIMIZE_TRANSFER },
+                async () => {
+                    const integrityData = Object.fromEntries(
+                        Object.entries(compilation.assets)
+                            .filter(([assetName]) => assetName.endsWith('.css') || assetName.endsWith('.js'))
+                            .map(([assetName, asset]) => {
+                            const hash = createHash(this.algorithm).update(asset.source()).digest('base64');
+                            const assetNormalized = assetName.split('?')[0];
+
+                            return [
+                                path.join(compiler.options.output.publicPath || '', assetNormalized),
+                                `${this.algorithm}-${hash}`
+                            ];
+                        })
+                    );
+                    const jsonData = JSON.stringify(integrityData, null, 2);
+                    const outputPath = path.join(this.publicPath, compiler.options.output.publicPath, this.fileName);
+
+                    await fs.writeFile(outputPath, jsonData, 'utf8');
+                    compilation.emitAsset(outputPath, new sources.RawSource(jsonData));
+                }
+            );
+        });
+    }
+}
+
+module.exports = IntegrityFilePlugin;