Laufzeit-Subresource-Integritätsprüfung für dynamische React-Chunk-Lader

async function secureImport(moduleUrl, expectedSubresourceHash) {
  const response = await fetch(moduleUrl);
  const buffer = await response.arrayBuffer();
  
  const hashBuffer = await crypto.subtle.digest('SHA-256', buffer);
  const hashArray = Array.from(new Uint8Array(hashBuffer));
  const base64Hash = 'sha256-' + btoa(String.fromCharCode(...hashArray));
 
  if (base64Hash !== expectedSubresourceHash) {
    throw new SecurityError(`Subresource Integrity match failed for ${moduleUrl}`);
  }
 
  const blob = new Blob([buffer], { type: 'application/javascript' });
  const objectUrl = URL.createObjectURL(blob);
  return import(/* webpackIgnore: true */ objectUrl);
}