From cb206634e736249a9fe32ac57c11c5684e9abefc Mon Sep 17 00:00:00 2001
From: Kevin J Hoerr <kjhoerr@protonmail.com>
Date: Tue, 2 Jan 2024 01:30:36 +0000
Subject: Better escapement for template and serve mode

---
 src/config.ts | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'src/config.ts')

diff --git a/src/config.ts b/src/config.ts
index 3746503..71a6c66 100644
--- a/src/config.ts
+++ b/src/config.ts
@@ -47,6 +47,21 @@ ${Object.values(metadata)
     },
   );
 
+  // add `cspMode` shortcode
+  config.addShortcode("metaCsp", function () {
+    const runMode = this.eleventy.env.runMode;
+    let policy: string;
+    if (runMode === "serve" || runMode == "watch") {
+      policy =
+        "default-src http://localhost:8080/;img-src http://localhost:8080/ data:;connect-src ws://localhost:8080/;script-src 'strict-dynamic' 'sha512-7Y25+FX/kRUbZEHtQBOSLffzofBxz8ABQErLAVpGkfzactkpJU5wtTmhIfIZeTw7VHg1JeTIC5kHkzPq7LqR1w==';";
+    } else {
+      // runMode === "build" or unknown
+      policy =
+        "default-src 'self';img-src 'self' data:;script-src 'none';object-src 'none';base-uri 'none';connect-src: 'none';";
+    }
+    return `<meta http-equiv="Content-Security-Policy" content="${policy}">`;
+  });
+
   // add `date` filter
   config.addFilter("formatDate", formatDate);
 
-- 
cgit