adding hashing script for safer inline

2026-07-09 07:35:44 -06:00
parent c07ef64426
commit 860aeb031a
2 changed files with 29 additions and 0 deletions
@@ -37,6 +37,7 @@ and no external requests — the page is fully self-contained.
 | `app.css` / `app.js` | Human-readable, unminified source of the styles/script that are inlined into `index.html`. Edit these, then re-minify and re-inline into `index.html` when publishing a change. |
 | `data/charmap.json` | The full character → Gen 1 byte value → species lookup table, generated from the source spreadsheet. Source of truth for `app.js`'s inlined data. |
 | `data/charmap.min.json` | Minified copy of the same table. |
+| `csp-hash.py` | Prints the `sha256-...` CSP tokens for `index.html`'s inline `<style>`/`<script>` blocks, for a host that locks down `Content-Security-Policy` to hashes instead of `'unsafe-inline'`. Re-run after re-inlining. |
 | `CHANGELOG.md` | Release history. |
 | `LICENSE` | GPLv3. |