From 75f4b333232ee99cd6af146c08a66c6ee4865f98 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Thu, 18 Nov 2021 18:50:44 -0500
Subject: set up SRI for future use by CSP v3

---
 process-static | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'process-static')

diff --git a/process-static b/process-static
index 9f33578c..22532ebf 100755
--- a/process-static
+++ b/process-static
@@ -25,8 +25,17 @@ replace=""
 for file in static-tmp/**/*.css static-tmp/js/*.js static-tmp/mask-icon.svg; do
     hash=$(sha256sum "$file" | head -c 8)
     dest="$(dirname $file)/$hash.$(basename $file)"
+
+    if [[ $file == *.css ]]; then
+        sri_hash=sha256-$(openssl dgst -sha256 -binary "$file" | openssl base64 -A)
+        replace+=";s@{{css|/${file#*/}}}@<link rel=\"stylesheet\" href=\"/${dest#*/}\" integrity=\"$sri_hash\"/>@g"
+    elif [[ $file == *.js ]]; then
+        sri_hash=sha256-$(openssl dgst -sha256 -binary "$file" | openssl base64 -A)
+        replace+=";s@{{js|/${file#*/}}}@<script type=\"module\" src=\"/${dest#*/}\" integrity=\"$sri_hash\"></script>@g"
+    fi
+
     mv "$file" "$dest"
-    replace+=";s|/${file#*/}|/${dest#*/}|g"
+    replace+=";s@{{path|/${file#*/}}}@/${dest#*/}@g"
 done
 
 cp nginx/nginx.conf nginx.conf.tmp
-- 
cgit v1.3.1