Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow option to self host the related dependencies #5866

Open
CaptainGlac1er opened this issue Oct 15, 2024 · 3 comments
Open

Allow option to self host the related dependencies #5866

CaptainGlac1er opened this issue Oct 15, 2024 · 3 comments
Assignees

Comments

@CaptainGlac1er
Copy link

Is your feature request related to a problem? Please describe.
Right now it tries to pull dependencies from a CDN, it would be nice to be able to self bundle the related dependencies

Describe the solution you'd like
Able to completely disable the remote dependency pull

Describe alternatives you've considered
Seems like would have to do a bit of messy work to prevent the pull of dependencies from remote source

@formio formio deleted a comment from lane-formio Nov 6, 2024
@brendanbond
Copy link
Contributor

Yeah, making this easier is on our roadmap. I think generally, though, that the requireLibrary function that this all runs on (the CDN, etc.) checks for the existence of a library on the globalThis before pulling from a CDN, and the CDN class itself has some helper methods that you can probably use to accomplish this. What dependencies were you trying to host yourself?

@CaptainGlac1er
Copy link
Author

@brendanbond Hi, thanks for the response, I did come across that so thankfully eventually was able to communicate to formio that I had bootstrap and fontawesome already loaded in my app. However I am concerned if a new dependency comes around it would be a good idea to allow it to be an opt in dependency as it might not be a good surprise if it starts pulling from an external source when we update to the latest version for example so we can vet the related dependency.

@CaptainGlac1er
Copy link
Author

Like for example a previous supply chain attack hit a cdn.
https://thehackernews.com/2024/07/polyfillio-attack-impacts-over-380000.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants