generate-tree now hashes each built bundle IIFE and writes integrity: 'sha384-…' into manifest.json, so the app-shell can load embedded (direct-mounted) plugins with integrity=… and refuse a tampered/CDN-swapped bundle. Pairs with the mount/locked flags convert.py adds (DOXA=embedded, foreign=iframe, all locked). |
||
|---|---|---|
| .. | ||
| assets | ||
| doxa-maps | ||
| external | ||
| pane-wrapper | ||
| .gitignore | ||
| icons.js | ||
| index.html | ||
| languages.js | ||
| nav.js | ||