add required cross origin to widgets.js script tag

immutable · Oct 16, 2024 · 9bf8787 · 9bf8787
1 parent 8c5b474
commit 9bf8787
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/packages/checkout/sdk/src/widgets/load.test.ts b/packages/checkout/sdk/src/widgets/load.test.ts
@@ -25,6 +25,7 @@ describe('load', () => {
       expect(document.head.innerHTML).toBe(
         '<script '
         + 'integrity="sha512-abc123" '
+        + 'crossorigin="anonymous" '
         + 'id="immutable-checkout-widgets-bundle" '
         + 'data-version="__SDK_VERSION__" '
         + `src="https://cdn.jsdelivr.net/npm/@imtbl/sdk@${SDK_VERSION}/dist/browser/checkout/widgets.js"></script>`,

diff --git a/packages/checkout/sdk/src/widgets/load.ts b/packages/checkout/sdk/src/widgets/load.ts
@@ -21,6 +21,7 @@ export async function loadUnresolvedBundle(
   if (!useLocalBundle()) {
     const integrityHash = await generateSHA512Hash(cdnUrl);
     tag.setAttribute('integrity', integrityHash);
+    tag.setAttribute('crossorigin', 'anonymous');
   }
 
   tag.setAttribute('id', scriptId);