df378d33ef
Some checks failed
CI / go (push) Waiting to run
CI / docker (push) Waiting to run
CI / lint-go (push) Waiting to run
CI / lint-docs (push) Waiting to run
CI / check-paperclip (push) Waiting to run
Deploy static site / Deploy to GitHub Pages (push) Has been cancelled
Deploy static site / Deploy via Docker to hatch.surf (push) Has been cancelled
Resolved conflicts by taking GitHub versions for: - .dockerignore, .gitignore, Dockerfile, README.md, docker-compose.yml Kept deploy.sh updated to: - Pull from GitHub (primary source) - Push to Gitea (push-mirror) - Build from site/ directory (GitHub structure) Co-Authored-By: Paperclip <noreply@paperclip.ing>
47 lines
2.2 KiB
JavaScript
47 lines
2.2 KiB
JavaScript
import { webpack, sources } from 'next/dist/compiled/webpack/webpack';
|
|
import crypto from 'crypto';
|
|
import { SUBRESOURCE_INTEGRITY_MANIFEST } from '../../../shared/lib/constants';
|
|
const PLUGIN_NAME = 'SubresourceIntegrityPlugin';
|
|
export class SubresourceIntegrityPlugin {
|
|
constructor(algorithm){
|
|
this.algorithm = algorithm;
|
|
}
|
|
apply(compiler) {
|
|
compiler.hooks.make.tap(PLUGIN_NAME, (compilation)=>{
|
|
compilation.hooks.afterProcessAssets.tap({
|
|
name: PLUGIN_NAME,
|
|
stage: webpack.Compilation.PROCESS_ASSETS_STAGE_ADDITIONS
|
|
}, ()=>{
|
|
// Collect all the assets.
|
|
let files = new Set();
|
|
for (const asset of compilation.getAssets()){
|
|
files.add(asset.name);
|
|
}
|
|
// For each file, deduped, calculate the file hash.
|
|
const hashes = {};
|
|
for (const file of files.values()){
|
|
// Get the buffer for the asset.
|
|
const asset = compilation.getAsset(file);
|
|
if (!asset) {
|
|
throw Object.defineProperty(new Error(`could not get asset: ${file}`), "__NEXT_ERROR_CODE", {
|
|
value: "E349",
|
|
enumerable: false,
|
|
configurable: true
|
|
});
|
|
}
|
|
// Get the buffer for the asset.
|
|
const buffer = asset.source.buffer();
|
|
// Create the hash for the content.
|
|
const hash = crypto.createHash(this.algorithm).update(buffer).digest().toString('base64');
|
|
hashes[file] = `${this.algorithm}-${hash}`;
|
|
}
|
|
const json = JSON.stringify(hashes, null, 2);
|
|
const file = 'server/' + SUBRESOURCE_INTEGRITY_MANIFEST;
|
|
compilation.emitAsset(file + '.js', new sources.RawSource(`self.__SUBRESOURCE_INTEGRITY_MANIFEST=${JSON.stringify(json)}`));
|
|
compilation.emitAsset(file + '.json', new sources.RawSource(json));
|
|
});
|
|
});
|
|
}
|
|
}
|
|
|
|
//# sourceMappingURL=subresource-integrity-plugin.js.map
|