From 83c4d19544e02ac01dedb537ca1e8c8d050f1aae Mon Sep 17 00:00:00 2001
From: Ardis Lu <ardisglu@gmail.com>
Date: Thu, 24 Sep 2026 22:26:09 -0700
Subject: [PATCH] Merge code injection into one <script>

This change sets up later security enhancements like SRI and `type="module"`
---
 index.html    | 5 +++--
 template.html | 1 -
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/index.html b/index.html
index a123f1b..c41bfa6 100644
--- a/index.html
+++ b/index.html
@@ -258,8 +258,9 @@
     document.querySelector('#download').addEventListener('click', e => {
       e.preventDefault();
       const encrypted = document.querySelector('#ciphertext').textContent;
-      const scriptInjection = `<script>const content = '${encrypted}'; ${decrypt.toString()}<\/script>`;
-      const output = template.replace('<template id="script-injection"></template>', scriptInjection);
+      const script = template.match(/<script.*>([\s\S]*)<\/script>/i)?.[1];
+      const injectedScript = `const content = '${encrypted}'; ${decrypt.toString()} ${script}`;
+      const output = template.replace(/(<script.*)>[\s\S]*<\/script>/i, `$1>${injectedScript}<\/script>`);
       downloadHtml(output, `${Date.now()}.html`);
     })
 
diff --git a/template.html b/template.html
index e23d765..e0eec3a 100644
--- a/template.html
+++ b/template.html
@@ -54,7 +54,6 @@
     </form>
   </main>
 
-  <template id="script-injection"></template>
   <script>
     const input = document.querySelector('input');
 
-- 
2.47.3