fork/cellxgene
1
0
Fork 0
mirror of https://github.com/chanzuckerberg/cellxgene.git synced 2026-09-30 17:38:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Refactor build and CSP headers for Safari compat (#1442)

Browse Source 
* add unsafe-inline directive to style-src

* debugging - turn on csp reporting

* revert reporting only csp

* do not inline JS and CSS in build

* enable HTTPs only when in production mode

* remove debug printf

* fix clean target

* revert force_https removal
This commit is contained in:
Bruce Martin
2020-05-04 12:47:35 -07:00
committed by GitHub
parent 6cccc41c0f
commit f42f5151a6
7 changed files with 1340 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/configuration/webpack/cspHashPlugin.js
+16 -3
View File
@@ -14,13 +14,14 @@ class CspHashPlugin {
(data, cb) => {
const { filename } = this.opts;
const $ = cheerio.load(data.html, { decodeEntities: false });
if (filename) {
const $ = cheerio.load(data.html, { decodeEntities: false });
const results = {};
results["script-hashes"] = $("script:not([src])")
results["script-hashes"] = $("script:not([src]):not([no-csp-hash])")
.map((i, elmt) => this.digest($(elmt).html()))
.get();
results["style-hashes"] = $("style:not([href])")
results["style-hashes"] = $("style:not([href]):not([no-csp-hash])")
.map((i, elmt) => this.digest($(elmt).html()))
.get();
@@ -31,6 +32,18 @@ class CspHashPlugin {
};
}
// remove no-csp-hash attributes
let foundOne = false;
$("script[no-csp-hash]").each((i, elmt) => {
$(elmt).removeAttr("no-csp-hash");
foundOne = true;
});
$("style[no-csp-hash]").each((i, elmt) => {
$(elmt).removeAttr("no-csp-hash");
foundOne = true;
});
if (foundOne) data.html = $.html();
// Tell webpack to move on
cb(null, data);
}