How to add Subresource Integrity to the link tags added in runtime by Vue's defineAsyncComponent?

[nebel95]

I have to add Subresource Integrity (https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) to all link tags on my page for compliance reason.

From my understanding, to handle importing chunks from defineAsyncComponent, vite's client runtime will inject a modulepreload link tag and then call the actual import to make a network call to fetch the chunk. How do I add integrity hashes (basically a hash of the imported file's content) to those link tags?

What I have in mind is to add a plugin to generate all the hashes at build time and upload it somewhere or maybe inject the file - sri mapping with head-prepend and then patch document.createElement so whenever a link tag is create, do a lookup and add the integrity hash. But that feels so convoluted. Is there a better way for me to do it?