Botframework-webchat: None of the “sha384” hashes in the integrity attribute match the content of the subresource.

[arman-g]

Screenshots

Version

CDN 4.9.1

Describe the bug

Under error console it shows error with message
"Failed to find a valid digest in the 'integrity' attribute for resource 'https://cdn.botframework.com/botframework-webchat/4.9.1/webchat.js' with computed SHA-256 integrity '/uKEj+TXU//TeP3tqa81MmH9ap2xVN1bogUjrvCTr/M='. The resource has been blocked".

Steps to reproduce

1. Add WebChat CDN 4.9.1 to the host application.
2. Run the application.
3. Observe the error under browser console.

Additional context

CDN 4.9.0 does not have this error.

Source Code

<script crossorigin="anonymous"
          integrity="sha384-MCSAp6/JY4zv0hrJhg231zdTCnIjyefitzXr46hE8XDzGGZSiEn7ClIOAEhQj6tP"
          src="https://cdn.botframework.com/botframework-webchat/4.9.1/webchat.js"></script>

<script crossorigin="anonymous"
          integrity="sha384-7GOIvwVvb++zeyLdIJlXOit8VaYsDJFo0VWa1hgXnVsUnidOjkGlNYOZfuBaepS5"
          src="https://cdn.botframework.com/botframework-webchat/4.9.1/webchat-es5.js"></script>

[Bug]

[compulim]

Will update them, thanks for reporting.

[compulim]

I have updated the SHA384 at https://github.com/microsoft/BotFramework-WebChat/releases/tag/v4.9.1.

We recently updated our bundle to be served gzipped. May be we didn't gunzip before calculating the SHA384.

I have updated the deployment steps and it should work correctly in the future.

[arman-g]

@compulim thank you, yes it works now but I see another error under the console and I am not sure if I need to open another issue for this or not.

This is defenfatly a different issue.

[compulim]

Can you open this one on botframework-directlinejs? I think this is related to the chat adapter, than Web Chat.

[arman-g]

@compulim sure, here is the issue #287