@netlify/plugin-csp-nonce 1.0.1 → 1.0.3

package/index.js

@@ -1,25 +1,34 @@
 import fs, { copyFileSync } from "fs";
 
+const SITE_ID = "321a7119-6008-49a8-9d2f-e20602b1b349";
+
 /* eslint-disable no-console */
 export const onPreBuild = async ({ inputs, netlifyConfig, utils }) => {
   console.log(`  Current working directory: ${process.cwd()}`);
   const config = JSON.stringify(inputs, null, 2);
+  const { build } = netlifyConfig;
+  const basePath =
+    build.environment.SITE_ID === SITE_ID
+      ? "./src"
+      : "./node_modules/@netlify/plugin-csp-nonce/src";
 
-  const functionsDir = netlifyConfig.build.functions || "./netlify/functions";
+  const functionsDir = build.functions || "./netlify/functions";
   // make the directory in case it actually doesn't exist yet
   await utils.run.command(`mkdir -p ${functionsDir}`);
   console.log(`  Copying function to ${functionsDir}...`);
   copyFileSync(
-    `./src/__csp-violations.ts`,
+    `${basePath}/__csp-violations.ts`,
     `${functionsDir}/__csp-violations.ts`
   );
 
-  const edgeFunctionsDir =
-    netlifyConfig.build.edge_functions || "./netlify/edge-functions";
+  const edgeFunctionsDir = build.edge_functions || "./netlify/edge-functions";
   // make the directory in case it actually doesn't exist yet
   await utils.run.command(`mkdir -p ${edgeFunctionsDir}`);
   console.log(`  Copying edge function to ${edgeFunctionsDir}...`);
-  copyFileSync(`./src/__csp-nonce.ts`, `${edgeFunctionsDir}/__csp-nonce.ts`);
+  copyFileSync(
+    `${basePath}/__csp-nonce.ts`,
+    `${edgeFunctionsDir}/__csp-nonce.ts`
+  );
   console.log(`  Copying config inputs to ${edgeFunctionsDir}...`);
   fs.writeFileSync(`${edgeFunctionsDir}/__csp-nonce-inputs.json`, config);
 

package/manifest.yml

@@ -0,0 +1,11 @@
+name: netlify-build-plugin-csp-nonce
+inputs:
+  - name: reportOnly
+    description: When true, uses the Content-Security-Policy-Report-Only header instead of the Content-Security-Policy header.
+    default: true
+  - name: path
+    description: The glob expressions of path(s) that should invoke the CSP nonce edge function. Can be a string or array of strings.
+    default: "/*"
+  - name: excludedPath
+    description: The glob expressions of path(s) that *should not* invoke the CSP nonce edge function. Must be an array of strings. This value gets spread with common non-html filetype extensions (*.css, *.js, *.svg, etc)
+    default: []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@netlify/plugin-csp-nonce",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Use a nonce for the script-src and style-src directives of your Content Security Policy.",
   "main": "index.js",
   "repository": {
@@ -12,7 +12,7 @@
   "type": "module",
   "files": [
     "index.js",
-    "manifest.yaml",
+    "manifest.yml",
     "src/*"
   ],
   "devDependencies": {