astro 5.8.2 → 5.9.0

package/dist/core/build/plugins/plugin-manifest.js

@@ -7,6 +7,18 @@ import { normalizeTheLocale } from "../../../i18n/index.js";
 import { toFallbackType, toRoutingStrategy } from "../../../i18n/utils.js";
 import { runHookBuildSsr } from "../../../integrations/hooks.js";
 import { BEFORE_HYDRATION_SCRIPT_ID, PAGE_SCRIPT_ID } from "../../../vite-plugin-scripts/index.js";
+import {
+  getAlgorithm,
+  getDirectives,
+  getScriptHashes,
+  getScriptResources,
+  getStrictDynamic,
+  getStyleHashes,
+  getStyleResources,
+  shouldTrackCspHashes,
+  trackScriptHashes,
+  trackStyleHashes
+} from "../../csp/common.js";
 import { encodeKey } from "../../encryption.js";
 import { fileExtension, joinPaths, prependForwardSlash } from "../../path.js";
 import { DEFAULT_COMPONENTS } from "../../routing/default.js";
@@ -126,7 +138,7 @@ async function createManifest(buildOpts, internals) {
   }
   const staticFiles = internals.staticFiles;
   const encodedKey = await encodeKey(await buildOpts.key);
-  return buildManifest(buildOpts, internals, Array.from(staticFiles), encodedKey);
+  return await buildManifest(buildOpts, internals, Array.from(staticFiles), encodedKey);
 }
 function injectManifest(manifest, chunk) {
   const code = chunk.code;
@@ -134,7 +146,7 @@ function injectManifest(manifest, chunk) {
     return JSON.stringify(manifest);
   });
 }
-function buildManifest(opts, internals, staticFiles, encodedKey) {
+async function buildManifest(opts, internals, staticFiles, encodedKey) {
   const { settings } = opts;
   const routes = [];
   const domainLookupTable = {};
@@ -221,6 +233,27 @@ function buildManifest(opts, internals, staticFiles, encodedKey) {
       domainLookupTable
     };
   }
+  let csp = void 0;
+  if (shouldTrackCspHashes(settings.config.experimental.csp)) {
+    const algorithm = getAlgorithm(settings.config.experimental.csp);
+    const scriptHashes = [
+      ...getScriptHashes(settings.config.experimental.csp),
+      ...await trackScriptHashes(internals, settings, algorithm)
+    ];
+    const styleHashes = [
+      ...getStyleHashes(settings.config.experimental.csp),
+      ...await trackStyleHashes(internals, settings, algorithm)
+    ];
+    csp = {
+      scriptHashes,
+      scriptResources: getScriptResources(settings.config.experimental.csp),
+      styleHashes,
+      styleResources: getStyleResources(settings.config.experimental.csp),
+      algorithm,
+      directives: getDirectives(settings.config.experimental.csp),
+      isStrictDynamic: getStrictDynamic(settings.config.experimental.csp)
+    };
+  }
   return {
     hrefRoot: opts.settings.config.root.toString(),
     cacheDir: opts.settings.config.cacheDir.toString(),
@@ -248,7 +281,8 @@ function buildManifest(opts, internals, staticFiles, encodedKey) {
     checkOrigin: (settings.config.security?.checkOrigin && settings.buildOutput === "server") ?? false,
     serverIslandNameMap: Array.from(settings.serverIslandNameMap),
     key: encodedKey,
-    sessionConfig: settings.config.session
+    sessionConfig: settings.config.session,
+    csp
   };
 }
 export {