csp_hasher 1.0.1 copy "csp_hasher: ^1.0.1" to clipboard
csp_hasher: ^1.0.1 copied to clipboard

Dart CSP hash generator can hash your inline scripts and styles.

CSP Hasher #

This is a simple tool to generate hashes for inline scripts or styles to allow the scripts in your CSP(Content Security Policy).

You can hash inline scripts and styles with sha256, sha384 and sha512.

Installing #

dart pub add content_length_validator

Usage #

By default csp_hasher will hash scripts tags in the given html with sha256

import 'dart:io';
import 'package:csp_hasher/csp_hasher.dart';

void main() {
    final cspHashes = hashScripts(File('mySuperNice.html'));
    print(cspHashes.first); // sha256-<hash>
    print(cspHashes.first.hash); // The base64 encoded hash
    print(cspHashes.first.hashType); // The hash type which is sha256 by default
    print(cspHashes.first.lineNumber); // Gives you the line number of the script tag in the html
    print(cspHashes.first.hashMode); // Gives you type which can be style or script
}

If you want to change the hash type you can do so by passing the hashType parameter to the hashScripts function.

import 'dart:io';
import 'package:csp_hasher/csp_hasher.dart';

void main() {
    final cspHashes = hashScripts(File('mySuperNice.html'), hashType: sha384);
    print(cspHashes.first); // sha384-<hash>

    final cspHashes = hashScripts(File('mySuperNice.html'), hashType: sha512);
    print(cspHashes.first); // sha512-<hash>
}

If you want to hash style tags you can do so by passing the hashMode parameter to the hashScripts function.

import 'dart:io';
import 'package:csp_hasher/csp_hasher.dart';

void main() {
    final cspHashes = hashScripts(File('mySuperNice.html', hashMode: HashMode.style);
    print(cspHashes.first.hashMode); // HashMode.style
}
0
likes
160
pub points
47%
popularity

Publisher

verified publisherjxstxn.dev

Dart CSP hash generator can hash your inline scripts and styles.

Homepage
Repository (GitHub)
View/report issues

Topics

#dart #csp #hash #security #html

Documentation

API reference

License

Apache-2.0 (license)

Dependencies

crypto, html

More

Packages that depend on csp_hasher