WebUI: require Subresource Integrity on external links

Also migrate to .mjs format.
qbittorrent · Feb 10, 2025 · b098453 · b098453
1 parent b052ad0
commit b098453
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 12 deletions.
diff --git a/src/webui/www/.htmlvalidate.json b/src/webui/www/.htmlvalidate.json
diff --git a/src/webui/www/.htmlvalidate.mjs b/src/webui/www/.htmlvalidate.mjs
@@ -0,0 +1,20 @@
+import { defineConfig } from "html-validate";
+
+export default defineConfig({
+    extends: [
+        "html-validate:recommended"
+    ],
+    rules: {
+        "input-missing-label": "error",
+        "long-title": "off",
+        "no-inline-style": "off",
+        "no-missing-references": "error",
+        "prefer-button": "off",
+        "require-sri": [
+            "error",
+            {
+                target: "crossorigin"
+            }
+        ]
+    }
+});