rehype-remove-external-script-content
rehype plugin to remove the contents of external JavaScript <script>s.
Contents
- What is this?
- When should I use this?
- Install
- Use
- API
- Example
- Syntax
- Syntax tree
- Types
- Compatibility
- Security
- Contribute
- License
What is this?
This package is a plugin that removes the contents of JavaScript <script>s that also have an src attribute. Scripts are supposed to be either external (with src) or internal (with code in them), and both is nonsensical.
When should I use this?
You can use this plugin when you want to improve the transfer size of HTML documents.
Install
This package is ESM only. In Node.js (version 16+), install with npm:
npm install rehype-remove-external-script-content
In Deno with esm.sh:
import rehypeRemoveExternalScriptContent from 'https://esm.sh/rehype-remove-external-script-content@4'
In browsers with esm.sh:
<script type="module">
import rehypeRemoveExternalScriptContent from 'https://esm.sh/rehype-remove-external-script-content@4?bundle'
</script>
Use
On the API:
import rehypeParse from 'rehype-parse'
import rehypeRemoveExternalScriptContent from 'rehype-remove-external-script-content'
import rehypeStringify from 'rehype-stringify'
import {read} from 'to-vfile'
import {unified} from 'unified'
const file = await unified()
.use(rehypeParse)
.use(rehypeRemoveExternalScriptContent)
.use(rehypeStringify)
.process(await read('index.html'))
console.log(String(file))
On the CLI:
rehype input.html --use rehype-remove-external-script-content --output output.html
On the CLI in a config file (here a package.json):
…
"rehype": {
"plugins": [
…
+ "rehype-remove-external-script-content",
…
]
}
…
API
This package exports no identifiers. The default export is rehypeRemoveExternalScriptContent.
unified().use(rehypeRemoveExternalScriptContent)
Remove the contents of external JavaScript <script>s.
Returns
Transform (Transformer).
Example
In
<script src="index.js">console.log(1);</script>
Out
<script src="index.js"></script>
Syntax
HTML is parsed according to WHATWG HTML (the living standard), which is also followed by all browsers.
Syntax tree
The syntax tree used is hast.
Types
This package is fully typed with TypeScript.
Compatibility
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release, we drop support for unmaintained versions of Node. This means we try to keep the current release line, rehype-remove-external-script-content@^4, compatible with Node.js 16.
Security
As rehype works on HTML and improper use of HTML can open you up to a cross-site scripting (XSS) attack, use of rehype can also be unsafe. Use rehype-sanitize to make the tree safe.
Contribute
See contributing.md in rehypejs/.github for ways to get started. See support.md for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.