  function addAttribute(mainTemplate, elName, source, chunk) {
    const outputOptions = this.compilation.outputOptions || mainTemplate.outputOptions;
    if (!outputOptions.crossOriginLoading) {
      this.sriPlugin.errorOnce(
        this.compilation,
        'webpack option output.crossOriginLoading not set, code splitting will not work!'
      );
    }
    return (Template.asString || mainTemplate.asString)([
      source,
      elName + '.integrity = __webpack_require__.sriHashes[' + (chunk ? `'${chunk.id}'` : 'chunkId') + '];',
      elName + '.crossOrigin = ' + JSON.stringify(outputOptions.crossOriginLoading) + ';',
    ]);
  };
The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.