Struct CspPlugin 

pub struct CspPlugin;

Plugin that extracts inline styles/scripts to external files with SRI.

Runs in after_compile after all other content transforms but before minification. For each HTML file:

1. Finds <style>…</style> and <script>…</script> inline blocks
2. Writes each block to _csp/<hash>.css or _csp/<hash>.js
3. Replaces the inline block with a <link>/<script src> tag including integrity and crossorigin attributes — SHA-384 by default, configurable via [security] sri_algorithm in ssg.toml (v0.0.47 plan §3 item 2.3)
4. Rewrites any <meta> CSP tags to remove 'unsafe-inline'

Blocks with type="application/ld+json" or data-ssg-livereload attributes are skipped (structured data / dev-only scripts).

Computed policy

The single string the plugin posture enforces is exposed via computed_policy; downstream HTTP-header emitters (e.g. the edge_headers postprocess plugin) call that function rather than hardcoding a CSP string of their own, so the policy stays in lock-step across <meta> injection and platform HTTP headers.

Implementations

impl CspPlugin

pub const fn new() -> Self

Creates a new CspPlugin.

Examples

use ssg::csp::CspPlugin;
use ssg::plugin::Plugin;

let p = CspPlugin::new();
assert_eq!(p.name(), "csp");

Trait Implementations

impl Clone for CspPlugin

fn clone(&self) -> CspPlugin

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CspPlugin

impl Debug for CspPlugin

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CspPlugin

fn default() -> CspPlugin

Returns the “default value” for a type.

impl Plugin for CspPlugin

fn name(&self) -> &'static str

Returns the unique name of this plugin.

fn has_transform(&self) -> bool

Returns true if this plugin implements transform_html. Override to true to opt in to the fused transform pass.

fn transform_html( &self, html: &str, path: &Path, ctx: &PluginContext, ) -> Result<String, SsgError>

Per-file HTML transform hook — called once per HTML file during the fused transform pass.

fn after_compile(&self, ctx: &PluginContext) -> Result<(), SsgError>

Called after site compilation completes.

fn before_compile(&self, _ctx: &PluginContext) -> Result<(), SsgError>

Called before site compilation begins.

fn needs_all_files(&self) -> bool

Returns true if this plugin must always observe the full cache.html_files() list — even during --incremental rebuilds that only invalidated a handful of pages.

fn on_serve(&self, _ctx: &PluginContext) -> Result<(), SsgError>

Called before the development server starts serving files.