astro/dist/core/csp/runtime.js

Astro is a modern site builder with web best practices, performance, and DX front-of-mind.

export function normalizeCspResourceEntry(entry) {
	if (typeof entry === "string") {
		return {
			resource: entry,
			kind: "default"
		};
	}
	return {
		resource: entry.resource,
		kind: entry.kind ?? "default"
	};
}
export function normalizeCspHashEntry(entry) {
	if (typeof entry === "string") {
		return {
			hash: entry,
			kind: "default"
		};
	}
	return {
		hash: entry.hash,
		kind: entry.kind ?? "default"
	};
}
/**
* Groups a directive's `resources`/`hashes` entries by their `kind`.
*/
export function partitionByKind(directive) {
	const groups = {
		default: {
			resources: [],
			hashes: []
		},
		element: {
			resources: [],
			hashes: []
		},
		attribute: {
			resources: [],
			hashes: []
		}
	};
	for (const entry of directive.resources) {
		const { resource, kind } = normalizeCspResourceEntry(entry);
		groups[kind].resources.push(resource);
	}
	for (const entry of directive.hashes) {
		const { hash, kind } = normalizeCspHashEntry(entry);
		groups[kind].hashes.push(hash);
	}
	return groups;
}
/**
* `existingDirective` is something like `img-src 'self'`. Same as `newDirective`.
*
* Returns `undefined` if no directive has been deduped
* @param existingDirective
* @param newDirective
*/
export function deduplicateDirectiveValues(existingDirective, newDirective) {
	const [directiveName, ...existingValues] = existingDirective.split(/\s+/).filter(Boolean);
	const [newDirectiveName, ...newValues] = newDirective.split(/\s+/).filter(Boolean);
	if (directiveName !== newDirectiveName) {
		return undefined;
	}
	const finalDirectives = Array.from(new Set([...existingValues, ...newValues]));
	return `${directiveName} ${finalDirectives.join(" ")}`;
}
export function pushDirective(directives, newDirective) {
	if (directives.length === 0) {
		return [newDirective];
	}
	const finalDirectives = [];
	let matched = false;
	for (const directive of directives) {
		if (matched) {
			finalDirectives.push(directive);
			continue;
		}
		const result = deduplicateDirectiveValues(directive, newDirective);
		if (result) {
			finalDirectives.push(result);
			matched = true;
		} else {
			finalDirectives.push(directive);
		}
	}
	if (!matched) {
		finalDirectives.push(newDirective);
	}
	return finalDirectives;
}