cellxgene/client/configuration/webpack/cspHashPlugin.js

const cheerio = require("cheerio");
const crypto = require("crypto");
HtmlWebpackPlugin = require("html-webpack-plugin");

class CspHashPlugin {
  constructor(opts) {
    this.opts = { ...opts };
  }

  apply(compiler) {
    compiler.hooks.compilation.tap("CspHashPlugin", (compilation) => {
      HtmlWebpackPlugin.getHooks(compilation).beforeEmit.tapAsync(
        "CspHashPlugin",
        (data, cb) => {
          const { filename } = this.opts;

          const $ = cheerio.load(data.html, { decodeEntities: false });

          if (filename) {
            const results = {};
            results["script-hashes"] = $("script:not([src]):not([no-csp-hash])")
              .map((i, elmt) => this.digest($(elmt).html()))
              .get();
            results["style-hashes"] = $("style:not([href]):not([no-csp-hash])")
              .map((i, elmt) => this.digest($(elmt).html()))
              .get();

            const json = JSON.stringify(results);
            compilation.assets[filename] = {
              source: () => json,
              size: () => json.length,
            };
          }

          // remove no-csp-hash attributes
          let foundOne = false;
          $("script[no-csp-hash]").each((i, elmt) => {
            $(elmt).removeAttr("no-csp-hash");
            foundOne = true;
          });
          $("style[no-csp-hash]").each((i, elmt) => {
            $(elmt).removeAttr("no-csp-hash");
            foundOne = true;
          });
          if (foundOne) data.html = $.html();

          // Tell webpack to move on
          cb(null, data);
        }
      );
    });
  }

  digest(str) {
    const hash = crypto
      .createHash("sha256")
      .update(str, "utf8")
      .digest("base64");
    return "sha256-" + hash;
  }
}

module.exports = CspHashPlugin;