Split inline scripts from an HTML file for CSP compliance
Command line usage:
cat index.html | crisper -h build.html -j build.js
crisper --source index.html --html build.html --js build.js
Optional Flags:
--script-in-head: in the output HTML file, place the script in <head>
with the defer attribute to provide better loading performance.
Note: this will not work correctly if your script contains
document.write calls.--only-split: Do not write include a <script> tag in the output HTML
file--always-write-script: Always create a .js file, even without any <script>
elements.Library usage:
var output = crisper({
source: 'source HTML string',
jsFileName: 'output js file name.js',
scriptInHead: Boolean, //default false
onlySplit: Boolean // default false
});
fs.writeFile(htmlOutputFileName, output.html, 'utf-8', ...);
fs.writeFile(jsOutputFileName, output.js, 'utf-8', ...);
Deprecated API:
var output = crisper.split('source HTML string', 'output js filename.js');
When using vulcanize, crisper can handle the html string output directly and write the CSP seperated files on the command line
vulcanize index.html --inline-script | crisper --html build.html --js
build.js
Or programmatically
vulcanize.process('index.html', function(err, html) {
if (err) {
return cb(err);
} else {
var out = crisper({
source: html,
jsFileName: 'name of js file.js',
scriptInHead: Boolean, // default false
onlySplit: Boolean // default false
})
cb(null, out.html, out.js);
}
});
FAQs
Make an HTML file with inline scripts CSP compliant
The npm package crisper receives a total of 1,591 weekly downloads. As such, crisper popularity was classified as popular.
We found that crisper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.