fix(security): allow more strict CSP for SVG assets (#9209)

Refs #7540
2023-09-14 12:34:13 +02:00
parent efe613322d
commit b7f533174a
8 changed files with 605 additions and 62 deletions
--- a/webpack/_config-builder.js
+++ b/webpack/_config-builder.js
@@ -26,9 +26,16 @@ const baseRules = [
      cacheDirectory: true,
    },
  },
-  { test: /\.(txt|yaml)$/, type: "asset/source" },
  {
-    test: /\.(png|jpg|jpeg|gif|svg)$/,
+    test: /\.(txt|yaml)$/,
+    type: "asset/source",
+  },
+  {
+    test: /\.svg$/,
+    use: ["@svgr/webpack"],
+  },
+  {
+    test: /\.(png|jpg|jpeg|gif)$/,
    type: "asset/inline",
  },
 ]