Description

According to Mozilla's documentation, CSP3 allows for the <hash-algorithm>-<base64-value> attribute of script-src to be applied for external scripts.

As I understand it (based on reading #35 and trying out the plugin myself), hashes are not generated and included for external scripts, only inline scripts.

It'd be nice if they could be included for external scripts too. (Maybe via a default-false configuration option?)

What type of issue is this?

• bug
• enhancement (feature request)
• question
• documentation related
• testing related
• discussion

Requirements

• I've read and understood the Contributing guidelines and have done my best effort to follow them.
• I've read and agree to the Code of Conduct.
• I've searched for any related issues and avoided creating a duplicate issue.