fix: to inject app env script as one liner (#3494)

commercetools · Apr 15, 2024 · 6a7900d · 6a7900d
1 parent b3c26dd
commit 6a7900d
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/.changeset/lovely-squids-cross.md b/.changeset/lovely-squids-cross.md
@@ -0,0 +1,5 @@
+---
+'@commercetools-frontend/mc-html-template': patch
+---
+
+Ensure injected application environment script is rendered as one liner (to match the CSP hash)
diff --git a/packages/mc-html-template/html-docs/application.html b/packages/mc-html-template/html-docs/application.html
@@ -166,9 +166,7 @@
     __LOADING_SCREEN_JS__
 
     <!-- Application globals -->
-    <script>
-      window.app = __APPLICATION_ENVIRONMENT__;
-    </script>
+    __APPLICATION_ENVIRONMENT__
 
     <!-- Main application chunks -->
     __APPLICATION_SCRIPT_IMPORTS__

diff --git a/packages/mc-html-template/src/replace-html-placeholders.ts b/packages/mc-html-template/src/replace-html-placeholders.ts
@@ -34,7 +34,7 @@ const replaceHtmlPlaceholders = (
     )
     .replace(
       new RegExp('__APPLICATION_ENVIRONMENT__', 'g'),
-      sanitizeAppEnvironment(options.env)
+      `<script>window.app = ${sanitizeAppEnvironment(options.env)};</script>`
     )
     .replace(
       new RegExp('__LOADING_SCREEN_JS__', 'g'),