Crisper
A tool that extracts inline JavaScript from HTML files to enable Content Security Policy compliance.
What is Crisper?
Crisper is a Node.js tool that extracts inline JavaScript from HTML files into separate external files. It solves the problem of Content Security Policy (CSP) compliance by eliminating the need for unsafe-inline directives, allowing developers to implement stricter security policies.
Web developers and security engineers working on projects that require CSP compliance, particularly those using Polymer or build tools like Vulcanize, Gulp, or Grunt.
Developers choose Crisper because it provides a simple, automated way to achieve CSP compliance without manual refactoring, integrates with popular build tools, and supports advanced CSP features like hash-based strict-dynamic policies.
Overview
Crisper is a utility that processes HTML files by separating inline JavaScript into external files, making it easier to implement Content Security Policy (CSP) restrictions. It helps developers avoid unsafe-inline directives by moving scripts to external resources that can be safely whitelisted.
Key Features
- Inline Script Extraction — Automatically extracts inline
<script>tags from HTML and writes them to a separate .js file. - CSP Compliance Support — Enables hash-based or strict-dynamic CSP policies by removing inline scripts that would otherwise require unsafe-inline.
- Flexible Script Placement — Optionally places the script reference in the
<head>(default for performance) or at the end of<body>(for document.write compatibility). - Build Tool Integration — Works with Vulcanize for Polymer projects and has plugins for Gulp and Grunt.
- Hashable Script Loader — Generates a script loader that supports hash-based CSP with strict-dynamic for enhanced security.
Philosophy
Crisper follows a pragmatic approach to CSP compliance, prioritizing security without sacrificing developer workflow by integrating seamlessly with existing build processes.
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
