[fix] Optimize SVG for WEB usage / CSP 'style-src self'

- Replace grunt-contrib-htmlmin by grunt-image [1].

- Activate svgo's [2] convertStyleToAttrs to make the HTML inline SVGs
  compoliant to the CSP policy [3]::

    Content-Security-Policy: style-src self;

[1] https://www.npmjs.com/package/grunt-image
[2] https://github.com/svg/svgo
[3] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src

Closes: https://github.com/searxng/searxng/issues/502

Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
This commit is contained in:
Markus Heiser 2021-11-14 13:26:12 +01:00
parent c6dcedb911
commit b07884c958
4 changed files with 29 additions and 9 deletions

View file

@ -9,7 +9,7 @@ module.exports = function(grunt) {
watch: {
scripts: {
files: ['gruntfile.js', 'src/**'],
tasks: ['eslint', 'copy', 'concat', 'svg2jinja', 'uglify', 'htmlmin', 'less:development', 'less:production']
tasks: ['eslint', 'copy', 'concat', 'svg2jinja', 'uglify', 'image', 'less:development', 'less:production']
}
},
eslint: {
@ -18,6 +18,7 @@ module.exports = function(grunt) {
failOnError: false
},
target: [
'svg4web.svgo.js',
'src/js/main/*.js',
'src/js/head/*.js',
'../__common__/js/*.js'
@ -95,11 +96,10 @@ module.exports = function(grunt) {
}
}
},
htmlmin: {
dist: {
image: {
svg4web: {
options: {
removeComments: true,
collapseWhitespace: true
svgo: ['--config', 'svg4web.svgo.js']
},
files: {
'../../../templates/__common__/searxng-wordmark.min.svg': 'src/svg/searxng-wordmark.svg'
@ -221,7 +221,7 @@ module.exports = function(grunt) {
grunt.loadNpmTasks('grunt-contrib-watch');
grunt.loadNpmTasks('grunt-contrib-copy');
grunt.loadNpmTasks('grunt-contrib-uglify');
grunt.loadNpmTasks('grunt-contrib-htmlmin');
grunt.loadNpmTasks('grunt-image');
grunt.loadNpmTasks('grunt-contrib-jshint');
grunt.loadNpmTasks('grunt-contrib-concat');
grunt.loadNpmTasks('grunt-contrib-less');
@ -238,7 +238,7 @@ module.exports = function(grunt) {
'concat',
'svg2jinja',
'uglify',
'htmlmin',
'image',
'less:development',
'less:production'
]);