From 5dfed495b824e0153d000047664c853fab20d096 Mon Sep 17 00:00:00 2001
From: Will <contact@novucs.net>
Date: Mon, 6 Jan 2025 05:27:39 +0000
Subject: [PATCH] fix: add integrity to modulepreload links if defined (#400)

---
 src/generator.ts          | 16 +++++++++++++---
 test/html/preload.test.js |  2 +-
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/src/generator.ts b/src/generator.ts
index 65a297e..c98712d 100644
--- a/src/generator.ts
+++ b/src/generator.ts
@@ -837,11 +837,21 @@ export class Generator {
       for (let dep of preloadDeps.sort()) {
         if (first || whitespace) preloads += newlineTab;
         if (first) first = false;
-        preloads += `<link rel="modulepreload" href="${
+        const url =
           rootUrl || htmlUrl
             ? relativeUrl(new URL(dep), new URL(rootUrl || htmlUrl), !!rootUrl)
-            : dep
-        }" />`;
+            : dep;
+        preloads += `<link rel="modulepreload" href="${url}"${
+          integrity
+            ? ` integrity="${await getIntegrity(
+                new Uint8Array(
+                  await (
+                    await fetch(url, this.traceMap.resolver.fetchOpts)
+                  ).arrayBuffer()
+                )
+              )}"`
+            : ""
+        } />`;
       }
     }
 
diff --git a/test/html/preload.test.js b/test/html/preload.test.js
index d00be51..48db89d 100644
--- a/test/html/preload.test.js
+++ b/test/html/preload.test.js
@@ -105,7 +105,7 @@ assert.strictEqual(
     "<!-- Generated by @jspm/generator - https://github.com/jspm/generator -->\n" +
     `<script async src="${esmsUrl}" crossorigin="anonymous" integrity="${esmsIntegrity}"></script>\n` +
     `<script type="importmap">{"imports":{"react":"https://ga.jspm.io/npm:react@16.14.0/index.js"},"scopes":{"https://ga.jspm.io/":{"object-assign":"https://ga.jspm.io/npm:object-assign@4.1.1/index.js"}},"integrity":{"https://ga.jspm.io/npm:object-assign@4.1.1/index.js":"sha384-iQp1zoaqIhfUYyYkz3UNk1QeFfmBGgt1Ojq0kZD5Prql1g7fgJVzVgsjDoR65lv8","https://ga.jspm.io/npm:react@16.14.0/cjs/react.production.min.js":"${reactProductionIntegrity}","https://ga.jspm.io/npm:react@16.14.0/index.js":"${reactIndexIntegrity}"}}</script>\n` +
-    '<link rel="modulepreload" href="https://ga.jspm.io/npm:object-assign@4.1.1/index.js" /><link rel="modulepreload" href="https://ga.jspm.io/npm:react@16.14.0/cjs/react.production.min.js" /><link rel="modulepreload" href="https://ga.jspm.io/npm:react@16.14.0/index.js" />\n' +
+    `<link rel="modulepreload" href="https://ga.jspm.io/npm:object-assign@4.1.1/index.js" integrity="sha384-iQp1zoaqIhfUYyYkz3UNk1QeFfmBGgt1Ojq0kZD5Prql1g7fgJVzVgsjDoR65lv8" /><link rel="modulepreload" href="https://ga.jspm.io/npm:react@16.14.0/cjs/react.production.min.js" integrity="${reactProductionIntegrity}" /><link rel="modulepreload" href="https://ga.jspm.io/npm:react@16.14.0/index.js" integrity="${reactIndexIntegrity}" />\n` +
     '<script type="module">\n' +
     "  import 'react';\n" +
     "</script>\n"