fix(security): allow more strict CSP for SVG assets (#9209)

Refs #7540
2023-09-14 12:34:13 +02:00
parent efe613322d
commit b7f533174a
8 changed files with 605 additions and 62 deletions
--- a/webpack/_config-builder.js
+++ b/webpack/_config-builder.js
@@ -26,9 +26,16 @@ const baseRules = [
      cacheDirectory: true,
    },
  },
-  { test: /\.(txt|yaml)$/, type: "asset/source" },
  {
-    test: /\.(png|jpg|jpeg|gif|svg)$/,
+    test: /\.(txt|yaml)$/,
+    type: "asset/source",
+  },
+  {
+    test: /\.svg$/,
+    use: ["@svgr/webpack"],
+  },
+  {
+    test: /\.(png|jpg|jpeg|gif)$/,
    type: "asset/inline",
  },
 ]
--- a/webpack/dev.js
+++ b/webpack/dev.js
@@ -89,7 +89,11 @@ const devConfig = configBuilder(
          type: "asset/source",
        },
        {
-          test: /\.(png|jpg|jpeg|gif|svg)$/,
+          test: /\.svg$/,
+          use: ["@svgr/webpack"],
+        },
+        {
+          test: /\.(png|jpg|jpeg|gif)$/,
          type: "asset/inline",
        },
      ],