csp2.pl

use Digest::SHA qw(sha256_base64);
use File::Copy;

my $start = "Header set Content-Security-Policy \"default-src 'none'; base-uri 'none'; img-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com; connect-src 'self' *.google-analytics.com *.analytics.google.com; frame-ancestors 'self'; manifest-src 'self';";
open(my $htaccess, '>>', '.htaccess');
opendir($dir, "C:/pages");
while (readdir $dir)
{
  my $dirEntry = $_;
  next if (index($dirEntry, ".HTM") < 0);
  next if (index($dirEntry, ".br") >= 0);
  next if (index($dirEntry, ".gz") >= 0);
  my $newstart = $start;
  if (($dirEntry eq "BIGCALC.HTM") || ($dirEntry eq "GRANCALC.HTM"))
  {
    next;
  }
  if (($dirEntry eq "FORM.HTM") || ($dirEntry eq "FORMULAR.HTM"))
  {
    $newstart = $newstart."form-action 'self';";
  }
  elsif (($dirEntry eq "DONATION.HTM") || ($dirEntry eq "DONACIONES.HTM"))
  {
    $newstart = $newstart."form-action www.paypal.com;";
  }
  else
  {
    $newstart = $newstart."form-action 'none';";
  }
  open(my $filehandle, '<', "C:/pages/$dirEntry");
  my $data = do { local $/; <$filehandle> };
  my $extra = "";
  print $htaccess  "<Files ${dirEntry}>\n${newstart}";
  getHashes($data, "style", $hash, "");
  print $htaccess  $hash;
  getHashes($data, "script", $hash, $extra);  
  print $htaccess  "${hash} report-uri https://alpertron23.report-uri.com/r/d/csp/enforce\"\n";
  print $htaccess  "</Files>\n\n";
  close($filehandle);
}
closedir $dir;
$newstart = $start."form-action 'none';";
open(my $filehandle, '<', "C:/pages/index.htm");
my $data = do { local $/; <$filehandle> };
my $extra = "";
print $htaccess  "<Files index.htm>\n${newstart}";
getHashes($data, "style", $hash, "");
print $htaccess  $hash;
getHashes($data, "script", $hash, $extra);  
print $htaccess  "${hash} report-uri https://alpertron23.report-uri.com/r/d/csp/enforce\"\n";
print $htaccess  "</Files>\n\n";
close($filehandle);

sub getHashes
{
  my $data = $_[0];
  my $tagname = $_[1];
  my $extra = $_[3];
  $_[2] = "";
  for (;;)
  {
    my $firstIndex = index($data, "<${tagname}>");
    if ($firstIndex == -1)
    {
      last;
    }
    my $lastIndex = index($data, "</${tagname}>", $firstIndex);
    $firstIndex = $firstIndex + length($tagname) + 2;
    my $substr = substr($data, $firstIndex, $lastIndex - $firstIndex);
    my $hash = sha256_base64($substr);
    while (length($hash) % 4)
    {
      $hash .= '=';
    }
    if ($_[2] eq "")
    {
      $_[2] = " ${tagname}-src 'unsafe-inline'${extra}";
    }
    $_[2] .= " 'sha256-${hash}'";
    $data = substr($data, $lastIndex);
  }
  if ($tagname eq "script")
  {
    $_[2] .= " www.googletagmanager.com";
  }
  if ($_[2] ne "")
  {
    $_[2] .= ";";
  }
  close $fh;
}