document corner case where cross-origin resources are statically imported instead of just included #57
Labels
bug
Something isn't working
documentation
Improvements or additions to documentation
good first issue
Good for newcomers
sri
SubResource Integrity
When
<script>
elements referring to cross-origin resources do not include thetype="module"
annotation or theintegrity
attribute, Astro/Vite might decide to create a new module that imports the original resource, instead of leaving the original reference.This can be problematic because of how the CSP
script-src
is constructed. While we look for a more permanent and solid workaround, this problem should be properly documented in the documentation site.The text was updated successfully, but these errors were encountered: