Merge pull request #8127 from efb4f5ff-1298-471a-8973-3d47447115dc/hotfix-release-v0.23.11

efb4f5ff-1298-471a-8973-3d47447115dc · web-flow · commit 382cfeb7cb10 · 2025-10-14T10:45:40.000+02:00
Hotfix release - v0.23.11
diff --git a/_scripts/sigFrameConfig.js b/_scripts/sigFrameConfig.js
@@ -5,9 +5,9 @@ const { readFileSync } = require('fs')
 const path = join(__dirname, '../src/renderer/sigFrameScript.js')
 const rawScript = readFileSync(path, 'utf8')
 
-const script = rawScript
+const script = rawScript.split(/\r?\n/).map(line => line.trim()).filter(line => !line.startsWith('//')).join('')
 
 module.exports.sigFrameTemplateParameters = {
   sigFrameSrc: `data:text/html,${encodeURIComponent(`<!doctype html><script>${script}</script>`)}`,
-  sigFrameCspHash: `sha256-${hash('sha256', script, 'base64')}`
+  sigFrameCspHash: `sha512-${hash('sha512', script, 'base64')}`
 }
diff --git a/package.json b/package.json
@@ -2,7 +2,7 @@
   "name": "freetube",
   "productName": "FreeTube",
   "description": "A private YouTube client",
-  "version": "0.23.10",
+  "version": "0.23.11",
   "license": "AGPL-3.0-or-later",
   "main": "./dist/main.js",
   "private": true,
diff --git a/src/renderer/sigFrameScript.js b/src/renderer/sigFrameScript.js
@@ -1,7 +1,8 @@
 // This is injected into the sigFrame iframe
 // See index.ejs and webpack.renderer.config.js
 window.addEventListener('message', (event) => {
-  const data = JSON.parse(event.data)
+  // eslint-disable-next-line @stylistic/semi
+  const data = JSON.parse(event.data);
 
   window.parent.postMessage(JSON.stringify({
     id: data.id,
