From 49fa5cdd26fe364bcd8d898c6d79f2d23254d7d9 Mon Sep 17 00:00:00 2001
From: City of Vernonia GIS <gis@vernonia-or.gov>
Date: Tue, 15 Jan 2019 09:51:48 -0800
Subject: [PATCH] docs(cdn): add sri hashes

---
 docs/acetate.config.js     | 69 ++++++++++++++++++++++++++++++++++++++
 docs/src/api/_package.html |  2 ++
 package-lock.json          |  8 ++++-
 package.json               |  1 +
 4 files changed, 79 insertions(+), 1 deletion(-)

diff --git a/docs/acetate.config.js b/docs/acetate.config.js
index d08d10de18..e4950bac72 100644
--- a/docs/acetate.config.js
+++ b/docs/acetate.config.js
@@ -5,7 +5,47 @@ const _ = require("lodash");
 
 const IS_DEV = process.env.ENV !== "prod";
 
+const pkgVersion = process.env.npm_package_version;
+const request = require("request");
+const sriToolbox = require("sri-toolbox");
+
+const packages = [
+  "auth",
+  "common",
+  "feature-service",
+  "feature-service-admin",
+  "geocoder",
+  "groups",
+  "items",
+  "request",
+  "routing",
+  "sharing",
+  "users"
+];
+
+const sriHashes = {};
+
+generateSriHashes = () => {
+  packages.forEach(pkg => {
+    const url = `http://unpkg.com/@esri/arcgis-rest-${pkg}@${pkgVersion}/dist/umd/${pkg}.umd.min.js`;
+    request(url, (err, res, body) => {
+      if (err) {
+        sriHashes[pkg] = "SRI_HASH_FAILED";
+      } else {
+        sriHashes[pkg] = sriToolbox.generate({
+          algorithms: ["sha384"]
+        }, body);
+      }
+    });
+  });
+};
+
 module.exports = function(acetate) {
+  /**
+   * Generate SRI hashes for dist minified js files.
+   */
+  generateSriHashes();
+
   /**
    * Load all .html and markdown pages in the `src` folder, assigning them a
    * default layout.
@@ -212,6 +252,35 @@ module.exports = function(acetate) {
     }@${package.version}/dist/umd/${package.name.replace("@esri/arcgis-rest-", "")}.umd.min.js"&gt;&lt;/script&gt;`;
   });
 
+  acetate.helper("scriptTagSRI", function(context, package) {
+   const hash = sriHashes[package.name.replace("@esri/arcgis-rest-", "")] || null;
+   if (hash) {
+     // if file request failed on doc deploy return basic script tag
+     if (hash === "SRI_HASH_FAILED") {
+       return `&lt;script src="https://unpkg.com/${
+         package.name
+       }@${
+         package.version
+       }/dist/umd/${
+         package.name.replace("@esri/arcgis-rest-", "")
+       }.umd.min.js"&gt;&lt;/script&gt;`;
+     } else {
+       return `&lt;script src="https://unpkg.com/${
+         package.name
+       }@${
+         package.version
+       }/dist/umd/${
+         package.name.replace("@esri/arcgis-rest-", "")
+       }.umd.min.js" integrity="${
+         hash
+       }" crossorigin="anonymous"&gt;&lt;/script&gt;`;
+     }
+   } else {
+     // common-types has no browser
+     return `This is a development package. Not avaiable via CDN.`;
+   }
+ });
+
   acetate.helper("npmInstallCmd", function(context, package) {
     const peers = package.peerDependencies
       ? Object.keys(package.peerDependencies).map(
diff --git a/docs/src/api/_package.html b/docs/src/api/_package.html
index f973826872..2bea30f2a2 100644
--- a/docs/src/api/_package.html
+++ b/docs/src/api/_package.html
@@ -5,6 +5,8 @@ <h2 class="font-size--1 trailer-half">npm install:</h2>
 <pre><code>{% npmInstallCmd pkg %}</code></pre>
 <h2 class="font-size--1 trailer-half">CDN:</h2>
 <pre><code>{% scriptTag pkg %}</code></pre>
+<h2 class="font-size--1 trailer-half">SRI:</h2>
+<pre><code>{% scriptTagSRI pkg %}</code></pre>
 <hr class="leader-half trailer-half">
 <ul class="list-plain package-contents">
 {% for declaration in declarations %}
diff --git a/package-lock.json b/package-lock.json
index 9b629995ec..e9303f90b4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3431,7 +3431,7 @@
       "dependencies": {
         "minimist": {
           "version": "1.2.0",
-          "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
+          "resolved": "http://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
           "integrity": "sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ=",
           "dev": true
         }
@@ -12794,6 +12794,12 @@
       "integrity": "sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=",
       "dev": true
     },
+    "sri-toolbox": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/sri-toolbox/-/sri-toolbox-0.2.0.tgz",
+      "integrity": "sha1-p/6lw/3lXmdc8cjAbz67XCk1g14=",
+      "dev": true
+    },
     "sshpk": {
       "version": "1.15.2",
       "resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.15.2.tgz",
diff --git a/package.json b/package.json
index 6611763e2f..e816a4c2fc 100644
--- a/package.json
+++ b/package.json
@@ -53,6 +53,7 @@
     "rollup-plugin-uglify": "^3.0.0",
     "shelljs": "^0.7.8",
     "slug": "^0.9.1",
+    "sri-toolbox": "0.2.0",
     "ts-node": "^3.3.0",
     "tslint": "^5.11.0",
     "tslint-config-prettier": "^1.6.0",