@netlify/plugin-csp-nonce 1.2.2 → 1.2.4

package/package.json

@@ -1,7 +1,7 @@
 {
   "private": false,
   "name": "@netlify/plugin-csp-nonce",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "Use a nonce for the script-src and style-src directives of your Content Security Policy.",
   "main": "index.js",
   "repository": {
@@ -17,13 +17,14 @@
     "src/*"
   ],
   "devDependencies": {
-    "prettier": "^2.8.8"
+    "prettier": "^2.8.8",
+    "typescript": "^5.2.2"
   },
   "bugs": {
     "url": "https://github.com/netlify/plugin-csp-nonce/issues"
   },
   "homepage": "https://github.com/netlify/plugin-csp-nonce#readme",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "build": "tsc src/*.ts --noEmit --strict --lib es2018,dom"
   }
 }

package/src/__csp-nonce.ts

@@ -1,11 +1,12 @@
 /* eslint-disable */
-// @ts-expect-error
+// @ts-ignore
 import type { Config, Context } from "netlify:edge";
-// @ts-expect-error
+// @ts-ignore
 import { randomBytes } from "node:crypto";
-// @ts-expect-error
+// @ts-ignore
 import { HTMLRewriter } from "https://ghuc.cc/worker-tools/html-rewriter@0.1.0-pre.17/index.ts";
 
+// @ts-ignore
 import inputs from "./__csp-nonce-inputs.json" assert { type: "json" };
 
 type Params = {
@@ -43,7 +44,7 @@ const handler = async (request: Request, context: Context) => {
 
   // CSP_NONCE_DISTRIBUTION is a number from 0 to 1,
   // but 0 to 100 is also supported, along with a trailing %
-  // @ts-expect-error
+  // @ts-ignore
   const distribution = Netlify.env.get("CSP_NONCE_DISTRIBUTION");
   if (!!distribution) {
     const threshold =
@@ -82,7 +83,7 @@ const handler = async (request: Request, context: Context) => {
     params.reportUri || "/.netlify/functions/__csp-violations"
   }`;
 
-  const csp = response.headers.get(header);
+  const csp = response.headers.get(header) as string;
   if (csp) {
     const directives = csp
       .split(";")
@@ -113,7 +114,7 @@ const handler = async (request: Request, context: Context) => {
 
   return new HTMLRewriter()
     .on("script", {
-      element(element) {
+      element(element: HTMLElement) {
         element.setAttribute("nonce", nonce);
       },
     })
@@ -174,11 +175,9 @@ const excludedExtensions = [
 
 export const config: Config = {
   path: params.path,
-  excludedPath: [
-    ...params.excludedPath,
-    "/.netlify/*",
-    `**/*.(${excludedExtensions.join("|")})`,
-  ],
+  excludedPath: ["/.netlify/*", `**/*.(${excludedExtensions.join("|")})`]
+    .concat(params.excludedPath)
+    .filter(Boolean),
   handler,
   onError: "bypass",
 };

package/src/__csp-violations.ts

@@ -1,4 +1,5 @@
 /* eslint-disable */
+// @ts-ignore
 const handler = async (event) => {
   try {
     const { "csp-report": cspReport } = JSON.parse(event.body);