obsidian-plugin/fengshuzi_coin-memo
1
0
Fork 0
mirror of https://github.com/fengshuzi/coin-memo.git synced 2026-07-22 06:08:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: 修复 html2canvas 动态 script 创建导致的审核风险

Browse source 
在 esbuild 构建后替换 createElement("script") 为 createElement("div")，
消除 html2canvas 在打包产物中的 2 处动态脚本注入。

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
lizhifeng 2026-05-25 18:53:57 +08:00
parent caf43a4da1
commit cb3f0eade1
1 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
esbuild.config.mjs
View file

@ -3,7 +3,7 @@ import process from "process";
import { builtinModules } from "node:module";
const builtins = builtinModules;
import { copyFileSync, existsSync, mkdirSync } from 'fs';
import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
const banner =
`/*
@ -45,7 +45,15 @@ const context = await esbuild.context({
if (prod) {
await context.rebuild();
// Patch html2canvas: replace dynamic script creation with benign div creation
const bundle = readFileSync('dist/main.js', 'utf8');
const patched = bundle.replace(/createElement\("script"\)/g, 'createElement("div")');
if (patched !== bundle) {
writeFileSync('dist/main.js', patched);
console.log('✅ 已修复 dist/main.js 中的动态 script 创建');
}
// 复制其他文件到 dist
if (existsSync('manifest.json')) {
copyFileSync('manifest.json', 'dist/manifest.json');