feat: support experiments.SubresourceIntegrityPlugin (#9171)

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

* feat(sri): add native plugin

.github/workflows/reusable-build.yml

@@ -251,7 +251,8 @@ jobs:
     name: Test Node ${{ matrix.node }}
     env:
       PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: true
-      PUPPETEER_SKIP_DOWNLOAD: true
+      # TODO: use puppeteer to test SRI Plugin, maybe find a better performance way
+      # PUPPETEER_SKIP_DOWNLOAD: true
     steps:
       - name: Checkout
         if: ${{ !inputs.skipable }}

Cargo.toml

@@ -180,6 +180,7 @@ rspack_plugin_runtime_chunk            = { version = "0.2.0", path = "crates/rsp
 rspack_plugin_schemes                  = { version = "0.2.0", path = "crates/rspack_plugin_schemes" }
 rspack_plugin_size_limits              = { version = "0.2.0", path = "crates/rspack_plugin_size_limits" }
 rspack_plugin_split_chunks             = { version = "0.2.0", path = "crates/rspack_plugin_split_chunks" }
+rspack_plugin_sri                      = { version = "0.2.0", path = "crates/rspack_plugin_sri" }
 rspack_plugin_swc_js_minimizer         = { version = "0.2.0", path = "crates/rspack_plugin_swc_js_minimizer" }
 rspack_plugin_warn_sensitive_module    = { version = "0.2.0", path = "crates/rspack_plugin_warn_sensitive_module" }
 rspack_plugin_wasm                     = { version = "0.2.0", path = "crates/rspack_plugin_wasm" }

README.md

@@ -87,6 +87,7 @@ Thanks to:
 - The [prefresh](https://github.com/preactjs/prefresh) created by [@Jovi De Croock](https://github.com/JoviDeCroock), which inspires implement [preact refresh rspack plugin](https://github.com/rspack-contrib/rspack-plugin-preact-refresh).
 - The [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) project created by [@sokra](https://github.com/sokra) which inspired implement css extract plugin.
 - The [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) project created by [@kevlened](https://github.com/kevlened) which inspired implement copy rspack plugin.
+- The [webpack-subresource-integrity](https://github.com/waysact/webpack-subresource-integrity) project created by [@jscheid](https://github.com/jscheid), which inspires implement subresource integrity rspack plugin.
 
 ## License
 

README.zh-CN.md

@@ -75,6 +75,7 @@ Rspack 是一个基于 Rust 编写的高性能 JavaScript 打包工具，它提
 - [prefresh](https://github.com/preactjs/prefresh) 项目（由 [@Jovi De Croock](https://github.com/JoviDeCroock) 创建），它启发了 Rspack 内的 PreactRefreshPlugin 实现。
 - [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) 项目（由 [@sokra](https://github.com/sokra) 创建），它启发了 Rspack 内的 CssExtractPlugin 实现。
 - [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) 项目（由 [@kevlened](https://github.com/kevlened) 创建），它启发了 Rspack 内的 CopyPlugin 实现。
+- [webpack-subresource-integrity](https://github.com/waysact/webpack-subresource-integrity) 项目（由 [@jscheid](https://github.com/jscheid) 创建），它启发了 Rspack 内的 SubresourceIntegrityPlugin 实现。
 
 ## License
 

crates/node_binding/binding.d.ts

@@ -381,7 +381,8 @@ export declare enum BuiltinPluginName {
   CssExtractRspackPlugin = 'CssExtractRspackPlugin',
   RsdoctorPlugin = 'RsdoctorPlugin',
   JsLoaderRspackPlugin = 'JsLoaderRspackPlugin',
-  LazyCompilationPlugin = 'LazyCompilationPlugin'
+  LazyCompilationPlugin = 'LazyCompilationPlugin',
+  SubresourceIntegrityPlugin = 'SubresourceIntegrityPlugin'
 }
 
 export declare function cleanupGlobalTrace(): void
@@ -1756,6 +1757,15 @@ export interface RawInfo {
   version?: string
 }
 
+export interface RawIntegrityData {
+  integerities: Array<RawIntegrityItem>
+}
+
+export interface RawIntegrityItem {
+  asset: string
+  integrity: string
+}
+
 export interface RawJavascriptParserOptions {
   dynamicImportMode?: string
   dynamicImportPreload?: string
@@ -2240,6 +2250,12 @@ export interface RawStorageOptions {
   directory: string
 }
 
+export interface RawSubresourceIntegrityPluginOptions {
+  integrityCallback?: (data: RawIntegrityData) => void
+  hashFuncNames: Array<string>
+  htmlPlugin: "JavaScript" | "Native" | "Disabled"
+}
+
 export interface RawSwcJsMinimizerOptions {
   compress: any
   mangle: any

crates/rspack_binding_values/Cargo.toml

@@ -82,6 +82,7 @@ rspack_plugin_runtime_chunk            = { workspace = true }
 rspack_plugin_schemes                  = { workspace = true }
 rspack_plugin_size_limits              = { workspace = true }
 rspack_plugin_split_chunks             = { workspace = true }
+rspack_plugin_sri                      = { workspace = true }
 rspack_plugin_swc_js_minimizer         = { workspace = true }
 rspack_plugin_warn_sensitive_module    = { workspace = true }
 rspack_plugin_wasm                     = { workspace = true }

crates/rspack_binding_values/src/raw_options/raw_builtins/mod.rs

@@ -13,13 +13,15 @@ mod raw_mf;
 mod raw_progress;
 mod raw_runtime_chunk;
 mod raw_size_limits;
+mod raw_sri;
 mod raw_swc_js_minimizer;
 
 use napi::{bindgen_prelude::FromNapiValue, Env, JsUnknown};
 use napi_derive::napi;
 use raw_dll::{RawDllReferenceAgencyPluginOptions, RawFlagAllModulesAsUsedPluginOptions};
 use raw_ids::RawOccurrenceChunkIdsPluginOptions;
 use raw_lightning_css_minimizer::RawLightningCssMinimizerRspackPluginOptions;
+use raw_sri::RawSubresourceIntegrityPluginOptions;
 use rspack_core::{BoxPlugin, Plugin, PluginExt};
 use rspack_error::Result;
 use rspack_ids::{
@@ -76,6 +78,7 @@ use rspack_plugin_runtime::{
 use rspack_plugin_runtime_chunk::RuntimeChunkPlugin;
 use rspack_plugin_schemes::{DataUriPlugin, FileUriPlugin};
 use rspack_plugin_size_limits::SizeLimitsPlugin;
+use rspack_plugin_sri::SubresourceIntegrityPlugin;
 use rspack_plugin_swc_js_minimizer::SwcJsMinimizerRspackPlugin;
 use rspack_plugin_warn_sensitive_module::WarnCaseSensitiveModulesPlugin;
 use rspack_plugin_wasm::{
@@ -199,6 +202,7 @@ pub enum BuiltinPluginName {
   // naming format follow XxxRspackPlugin
   JsLoaderRspackPlugin,
   LazyCompilationPlugin,
+  SubresourceIntegrityPlugin,
 }
 
 #[napi(object)]
@@ -565,6 +569,11 @@ impl BuiltinPlugin {
         let options = raw_options.into();
         plugins.push(RsdoctorPlugin::new(options).boxed());
       }
+      BuiltinPluginName::SubresourceIntegrityPlugin => {
+        let raw_options = downcast_into::<RawSubresourceIntegrityPluginOptions>(self.options)?;
+        let options = raw_options.into();
+        plugins.push(SubresourceIntegrityPlugin::new(options).boxed());
+      }
     }
     Ok(())
   }

crates/rspack_binding_values/src/raw_options/raw_builtins/raw_sri.rs

@@ -0,0 +1,68 @@
+use std::sync::Arc;
+
+use derive_more::Debug;
+use napi_derive::napi;
+use rspack_napi::threadsafe_function::ThreadsafeFunction;
+use rspack_plugin_sri::{
+  IntegrityCallbackData, SubresourceIntegrityHashFunction, SubresourceIntegrityPluginOptions,
+};
+
+#[derive(Debug)]
+#[napi(
+  object,
+  object_to_js = false,
+  js_name = "RawSubresourceIntegrityPluginOptions"
+)]
+pub struct RawSubresourceIntegrityPluginOptions {
+  #[debug(skip)]
+  #[napi(ts_type = "(data: RawIntegrityData) => void")]
+  pub integrity_callback: Option<ThreadsafeFunction<RawIntegrityData, ()>>,
+  pub hash_func_names: Vec<String>,
+  #[napi(ts_type = "\"JavaScript\" | \"Native\" | \"Disabled\"")]
+  pub html_plugin: String,
+}
+
+impl From<RawSubresourceIntegrityPluginOptions> for SubresourceIntegrityPluginOptions {
+  fn from(options: RawSubresourceIntegrityPluginOptions) -> Self {
+    Self {
+      integrity_callback: if let Some(func) = options.integrity_callback {
+        Some(Arc::new(move |data| {
+          func.blocking_call_with_sync(data.into())
+        }))
+      } else {
+        None
+      },
+      hash_func_names: options
+        .hash_func_names
+        .into_iter()
+        .map(SubresourceIntegrityHashFunction::from)
+        .collect::<Vec<_>>(),
+      html_plugin: options.html_plugin.into(),
+    }
+  }
+}
+
+#[derive(Debug)]
+#[napi(object)]
+pub struct RawIntegrityData {
+  pub integerities: Vec<RawIntegrityItem>,
+}
+
+impl From<IntegrityCallbackData> for RawIntegrityData {
+  fn from(data: IntegrityCallbackData) -> Self {
+    Self {
+      integerities: data
+        .integerities
+        .into_iter()
+        .map(|(asset, integrity)| RawIntegrityItem { asset, integrity })
+        .collect::<Vec<_>>(),
+    }
+  }
+}
+
+#[derive(Debug)]
+#[napi(object)]
+pub struct RawIntegrityItem {
+  pub asset: String,
+  pub integrity: String,
+}

crates/rspack_plugin_sri/Cargo.toml

@@ -0,0 +1,38 @@
+[package]
+description = "rspack subresource integrity plugin"
+edition     = "2021"
+license     = "MIT"
+name        = "rspack_plugin_sri"
+repository  = "https://github.com/web-infra-dev/rspack"
+version     = "0.2.0"
+# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+
+[dependencies]
+cow-utils                       = { workspace = true }
+dashmap                         = { workspace = true }
+derive_more                     = { workspace = true, features = ["debug"] }
+futures                         = { workspace = true }
+indexmap                        = { workspace = true }
+pathdiff                        = { workspace = true }
+rayon                           = { workspace = true }
+regex                           = { workspace = true }
+rspack_base64                   = { workspace = true }
+rspack_cacheable                = { workspace = true }
+rspack_collections              = { workspace = true }
+rspack_core                     = { workspace = true }
+rspack_error                    = { workspace = true }
+rspack_fs                       = { workspace = true }
+rspack_hook                     = { workspace = true }
+rspack_paths                    = { workspace = true }
+rspack_plugin_html              = { workspace = true }
+rspack_plugin_real_content_hash = { workspace = true }
+rspack_plugin_runtime           = { workspace = true }
+rspack_util                     = { workspace = true }
+rustc-hash                      = { workspace = true }
+serde_json                      = { workspace = true }
+sha2                            = { workspace = true }
+tracing                         = { workspace = true }
+urlencoding                     = { workspace = true }
+
+[package.metadata.cargo-shear]
+ignored = ["tracing"]

crates/rspack_plugin_sri/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2022-present Bytedance, Inc. and its affiliates.
+
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.