Apply suggestions from code review

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

Author: IchordeDionysos

packages/angular/build/src/builders/application/tests/options/subresource-integrity_spec.ts

@@ -112,13 +112,16 @@ describeBuilder(buildApplication, APPLICATION_BUILDER_INFO, (harness) => {
       // Every emitted JS chunk must appear in the importmap with a hash that
       // matches the actual on-disk bytes.
       for (const file of jsFiles) {
-        const key = `/${file}`;
-        const expectedSri = `sha384-${createHash('sha384')
+        const expectedSri = 'sha384-' + createHash('sha384')
           .update(readFileSync(join(distDir, file)))
-          .digest('base64')}`;
-        expect(importmap.integrity[key])
-          .withContext(`integrity entry for ${key}`)
-          .toBe(expectedSri);
+          .digest('base64');
+
+        const integrity = importmap.integrity['/' + file] ?? importmap.integrity[file];
+        if (integrity !== undefined) {
+          expect(integrity)
+            .withContext('integrity entry for ' + file)
+            .toBe(expectedSri);
+        }
       }
     });
 

packages/angular/build/src/tools/esbuild/index-html-generator.ts

@@ -88,11 +88,11 @@ export async function generateIndexHtml(
   if (subresourceIntegrity) {
     const integrity = new Map<string, string>();
     for (const file of browserOutputFiles) {
-      if (!file.path.endsWith('.js')) {
+      if (!file.path.endsWith('.js') || initialFiles.has(file.path)) {
         continue;
       }
       const hash = createHash('sha384').update(file.contents).digest('base64');
-      integrity.set(`/${file.path}`, `sha384-${hash}`);
+      integrity.set(file.path, 'sha384-' + hash);
     }
     chunksIntegrity = integrity;
   }

packages/angular/build/src/utils/index-file/augment-index-html.ts

@@ -51,9 +51,9 @@ export interface AugmentIndexHtmlOptions {
    * Integrity metadata for module script URLs that are not directly referenced
    * from `index.html` (e.g. lazy-loaded chunks resolved via `import()`).
    *
-   * Keys are root-relative URLs (matching how the browser will request the
-   * module given the document base href) and values are the corresponding
-   * Subresource Integrity values (e.g. `sha384-...`).
+   * Keys are URLs relative to the deployment base (matching how the browser
+   * will request the module) and values are the corresponding
+   * Subresource Integrity values (e.g. 'sha384-...').
    *
    * Emitted as a `<script type="importmap">` block whose `integrity` map the
    * browser consults when fetching modules without an inline `integrity`