sneak
3a93e6b4ed
check / check (push) Waiting to run
The pages' Content-Security-Policy forbids eval, which the standard Alpine.js build needs, so no directive ran: add forms showed open and events never collapsed. 3p/ now holds the @alpinejs/csp 3.14.9 tarball instead, and every directive in templates/ names a property or method of a component registered in static/js/app.js, as that build requires. The policy is unchanged. A headless Chromium test in internal/server loads the webhook page and the event log under the real headers. The Dockerfile's test stage installs chromium; where it is missing the test skips. Model: opus-5-5
18 lines
534 B
Bash
Executable File
18 lines
534 B
Bash
Executable File
#!/bin/sh
|
|
# script/assets: extract Alpine.js from its npm package tarball, committed
|
|
# in 3p/, to static/js/alpine.min.js, where go:embed reads it. The package
|
|
# is @alpinejs/csp, Alpine's build for pages whose Content-Security-Policy
|
|
# forbids eval. The extracted file is not committed. script/test, make
|
|
# build and make dev run this first.
|
|
set -eu
|
|
|
|
ROOT="$(cd "$(dirname "$0")/.." && pwd -P)"
|
|
|
|
main() {
|
|
cd "$ROOT"
|
|
tar -xzOf 3p/alpinejs-csp-3.14.9.tgz package/dist/cdn.min.js \
|
|
>static/js/alpine.min.js
|
|
}
|
|
|
|
main "$@"
|