From: Ardis Lu <ardisglu@gmail.com>
Date: Fri, 25 Sep 2026 05:26:09 +0000 (-0700)
Subject: Merge code injection into one <script>
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=83c4d19544e02ac01dedb537ca1e8c8d050f1aae;p=static-encrypt

Merge code injection into one <script>

This change sets up later security enhancements like SRI and `type="module"`
---

diff --git a/index.html b/index.html
index a123f1b..c41bfa6 100644
--- a/index.html
+++ b/index.html
@@ -258,8 +258,9 @@
     document.querySelector('#download').addEventListener('click', e => {
       e.preventDefault();
       const encrypted = document.querySelector('#ciphertext').textContent;
-      const scriptInjection = `<script>const content = '${encrypted}'; ${decrypt.toString()}<\/script>`;
-      const output = template.replace('<template id="script-injection"></template>', scriptInjection);
+      const script = template.match(/<script.*>([\s\S]*)<\/script>/i)?.[1];
+      const injectedScript = `const content = '${encrypted}'; ${decrypt.toString()} ${script}`;
+      const output = template.replace(/(<script.*)>[\s\S]*<\/script>/i, `$1>${injectedScript}<\/script>`);
       downloadHtml(output, `${Date.now()}.html`);
     })
 
diff --git a/template.html b/template.html
index e23d765..e0eec3a 100644
--- a/template.html
+++ b/template.html
@@ -54,7 +54,6 @@
     </form>
   </main>
 
-  <template id="script-injection"></template>
   <script>
     const input = document.querySelector('input');