Dereku/snappymail
0
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-11-02 10:28:50 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added Subresource Integrity checks from Tachyon

Browse source 
64e23d4fca
This commit is contained in:
the-djmaze 2026-11-01 22:10:41 +01:00
parent 30469ae2dc
commit 124a9c687e
7 changed files with 81 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

39
tasks/sri.js Normal file
View file

@ -0,0 +1,39 @@
/* Tachyon Webmail (c) Tachyon | Licensed under AGPL v3 */
const fs = require('fs');
const crypto = require('crypto');
const path = require('path');
const { config } = require('./config');
function sriHash(filePath) {
const data = fs.readFileSync(filePath);
const hash = crypto.createHash('sha384').update(data).digest('base64');
return 'sha384-' + hash;
}
function sri(done) {
const jsMinDir = config.paths.staticMinJS;
const cssDir = config.paths.staticCSS;
const files = [
['libs.min.js', jsMinDir + 'libs.min.js'],
['app.min.js', jsMinDir + 'app.min.js'],
['admin.min.js', jsMinDir + 'admin.min.js'],
['app.min.css', cssDir + 'app.min.css'],
['admin.min.css',cssDir + 'admin.min.css'],
];
const hashes = {};
for (const [key, filePath] of files) {
if (fs.existsSync(filePath)) {
hashes[key] = sriHash(filePath);
}
}
const outPath = path.join('snappymail/v/' + config.devVersion, 'static/sri.json');
fs.writeFileSync(outPath, JSON.stringify(hashes, null, '\t') + '\n');
console.log('[sri] wrote ' + outPath);
done();
}
exports.sri = sri;