Bug Report
Orchestrator version
4.31.1
80ac2f9
Backend
sqlite3
Configuration
{
"Debug": true,
"EnableSyslog": true,
"ListenAddress": ":3000",
[other information not important]
}
Topology
/* N/A - Not applicable for Web UI CSS / SRI integrity issue */
Steps to reproduce
- Install package orchestrator_4.31.1_amd64.deb on Debian system
- Go to page http://127.0.0.1:3000
- Observe the broken layout and check the browser Developer Console (F12).
Expected behavior
The Web UI should load correctly with all CSS styles applied from Bootstrap.
Actual behavior
The layout is unstyled and broken because the browser blocks loading bootstrap.min.css due to a Subresource Integrity (SRI) hash mismatch.
Logs
Browser developer console show:
Failed to find a valid digest in the 'integrity' attribute for resource 'https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css' with computed SHA-384 integrity 'QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH'. The resource has been blocked.
Additional context
In file resources/templates/layout.tmpl there is:
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YcnS/1p8FjY20lOFFCB6Uf8ECZTI2bPZCmL" crossorigin="anonymous">
but correct SHA384 sum is:
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous">
Workaround that work for me on Debian is to change this one line with correct sha384 sum.
Bug Report
Orchestrator version
4.31.1
80ac2f9
Backend
sqlite3
Configuration
Topology
Steps to reproduce
Expected behavior
The Web UI should load correctly with all CSS styles applied from Bootstrap.
Actual behavior
The layout is unstyled and broken because the browser blocks loading bootstrap.min.css due to a Subresource Integrity (SRI) hash mismatch.
Logs
Browser developer console show:
Additional context
In file resources/templates/layout.tmpl there is:
but correct SHA384 sum is:
Workaround that work for me on Debian is to change this one line with correct sha384 sum.