Merge pull request #139 from AegisJSProject/feature/bundle

Bundle some dependencies

Author: shgysk8zer0

CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v0.1.4] - 2025-02-20
+
+### Add
+- Add minified ESM version
+
+### Changed
+- Bundle `marked` and `marked-highlight` (better for CSP)
+- Switch to using `@shgysk8zer0/http-server` in dev
+- Use minified ESM as default export/module
+
 ## [v0.1.3] - 2024-09-19
 
 ### Added

http.config.js

@@ -0,0 +1,38 @@
+export default {
+	open: true,
+	routes: {
+		'/': async (req) => {
+			if (req.destination === 'document') {
+				// Hack to make it not read-only
+				const importmap = await import('@shgysk8zer0/importmap').then(mod => ({ ...mod.importmap }));
+				const { readFile } = await import('node:fs/promises');
+				importmap.imports['@aegisjsproject/markdown'] = '/markdown.min.js';
+				importmap.imports['@aegisjsproject/markdown/'] = '/';
+				const json = JSON.stringify(importmap);
+				const hash = new Uint8Array(await crypto.subtle.digest('SHA-384', new TextEncoder().encode(json)));
+				const integrity = 'sha384-' + hash.toBase64();
+				const doc = await readFile('./test/index.html', { encoding: 'utf-8' })
+					.then(doc => doc.replace('{{ importmap }}', json).replace('{{ integrity }}', integrity));
+
+				const csp = `default-src 'none';
+					script-src 'self' https://unpkg.com/@shgysk8zer0/ https://unpkg.com/@aegisjsproject/ https://unpkg.com/@highlightjs/ '${integrity}';
+					style-src 'self' blob: https://unpkg.com/@highlightjs/;
+					img-src 'self' https://img.shields.io/ https://github.com/AegisJSProject/markdown/workflows/ https://github.com/AegisJSProject/markdown/actions/workflows/;
+					connect-src 'self';
+					trusted-types empty#html empty#script aegis-sanitizer#html;
+					require-trusted-types-for 'script'`;
+
+				return new Response(doc, {
+					headers: {
+						'Content-Type': 'text/html',
+						'Content-Security-Policy': csp.replaceAll(/[\n\t]/g, ' '),
+					}
+				});
+			} else {
+				return new Response(req.destination, {
+					headers: { 'Content-Type': 'text/plain' },
+				});
+			}
+		}
+	}
+};