docs(legacy): add test case to ensure correct csp hashes in readme.md

packages/plugin-legacy/README.md

@@ -159,7 +159,7 @@ The legacy plugin requires inline scripts for [Safari 10.1 `nomodule` fix](https
 
 - `sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=`
 - `sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=`
-- `sha256-p7PoC97FO+Lu90RNjGWxhbm13yALSR4xzV8vaDhaQBo=`
+- `sha256-4y/gEB2/KIwZFTfNqwXJq4olzvmQ0S214m9jwKgNXoc=`
 - `sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=`
 
 <!--

playground/legacy/__tests__/legacy.spec.ts

@@ -89,6 +89,10 @@ test('asset url', async () => {
  )
 })
 
+test('correct CSP hashes in README.md', async () => {
+ await untilUpdated(() => page.textContent('#csp-hashes'), 'true', true)
+})
+
 describe.runIf(isBuild)('build', () => {
  test('should generate correct manifest', async () => {
  const manifest = readManifest()

playground/legacy/index.html

@@ -11,4 +11,5 @@ <h1 id="app"></h1>
 <p>## worker message:</p>
 <div class="worker-message"></div>
 <div id="asset-path"></div>
+<div id="csp-hashes"></div>
 <script type="module" src="./main.js"></script>

playground/legacy/main.js

@@ -72,6 +72,8 @@ document
 
 text('#asset-path', viteSvgPath)
 
+text('#csp-hashes', __CORRECT_CSP_HASHES_IN_README__)
+
 function text(el, text) {
  document.querySelector(el).textContent = text
 }

playground/legacy/vite.config.js

@@ -1,8 +1,21 @@
 import fs from 'node:fs'
 import path from 'node:path'
-import legacy from '@vitejs/plugin-legacy'
+import legacy, { cspHashes } from '@vitejs/plugin-legacy'
 import { defineConfig } from 'vite'
 
+function isCorrectCspHashesInReadme() {
+ const readme = fs
+ .readFileSync(
+ path.resolve(__dirname, 'node_modules/@vitejs/plugin-legacy/README.md'),
+ )
+ .toString()
+ const hashesInDoc = [...readme.matchAll(/`sha256-(.+)`/g)].map(
+ (match) => match[1],
+ )
+
+ return cspHashes.every((hash, index) => hash === hashesInDoc[index])
+}
+
 export default defineConfig({
  base: './',
  plugins: [
@@ -11,6 +24,11 @@ export default defineConfig({
  modernPolyfills: true,
  }),
  ],
+ define: {
+ __CORRECT_CSP_HASHES_IN_README__: JSON.stringify(
+ isCorrectCspHashesInReadme(),
+ ),
+ },
 
  build: {
  cssCodeSplit: false,