rehype-remove-external-script-content

rehype plugin to remove the contents of external JavaScript <script>s.

Contents

• What is this?
• When should I use this?
• Install
• Use
• API
  • unified().use(rehypeRemoveExternalScriptContent)
• Example
• Syntax
• Syntax tree
• Types
• Compatibility
• Security
• Contribute
• License

What is this?

This package is a plugin that removes the contents of JavaScript <script>s that also have an src attribute. Scripts are supposed to be either external (with src) or internal (with code in them), and both is nonsensical.

When should I use this?

You can use this plugin when you want to improve the transfer size of HTML documents.

Install

This package is ESM only. In Node.js (version 16+), install with npm:

npm install rehype-remove-external-script-content

In Deno with esm.sh:

import rehypeRemoveExternalScriptContent from 'https://esm.sh/rehype-remove-external-script-content@4'

In browsers with esm.sh:

<script type="module">
  import rehypeRemoveExternalScriptContent from 'https://esm.sh/rehype-remove-external-script-content@4?bundle'
</script>

Use

On the API:

import rehypeParse from 'rehype-parse'
import rehypeRemoveExternalScriptContent from 'rehype-remove-external-script-content'
import rehypeStringify from 'rehype-stringify'
import {read} from 'to-vfile'
import {unified} from 'unified'

const file = await unified()
  .use(rehypeParse)
  .use(rehypeRemoveExternalScriptContent)
  .use(rehypeStringify)
  .process(await read('index.html'))

console.log(String(file))

On the CLI:

rehype input.html --use rehype-remove-external-script-content --output output.html

On the CLI in a config file (here a package.json):

 …
 "rehype": {
   "plugins": [
     …
+    "rehype-remove-external-script-content",
     …
   ]
 }
 …

API

This package exports no identifiers. The default export is rehypeRemoveExternalScriptContent.

unified().use(rehypeRemoveExternalScriptContent)

Remove the contents of external JavaScript <script>s.

Returns

Transform (Transformer).

Example

In

<script src="index.js">console.log(1);</script>

Out

<script src="index.js"></script>

Syntax

HTML is parsed according to WHATWG HTML (the living standard), which is also followed by all browsers.

Syntax tree

The syntax tree used is hast.

Types

This package is fully typed with TypeScript.

Compatibility

Projects maintained by the unified collective are compatible with maintained versions of Node.js.

When we cut a new major release, we drop support for unmaintained versions of Node. This means we try to keep the current release line, rehype-remove-external-script-content@^4, compatible with Node.js 16.

Security

As rehype works on HTML and improper use of HTML can open you up to a cross-site scripting (XSS) attack, use of rehype can also be unsafe. Use rehype-sanitize to make the tree safe.

Contribute

See contributing.md in rehypejs/.github for ways to get started. See support.md for ways to get help.

This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.

License

MIT © Titus Wormer