From 5eb4a53de1c1356ee57603fc8c8c4305517f8b1c Mon Sep 17 00:00:00 2001
From: Joshua Tauberer <jt@occams.info>
Date: Sat, 24 Feb 2018 07:54:02 -0500
Subject: [PATCH] remove old tools/update-subresource-integrity.py script which
 isn't used now that we download all admin page remote assets during setup

---
 tools/update-subresource-integrity.py | 24 ------------------------
 1 file changed, 24 deletions(-)
 delete mode 100755 tools/update-subresource-integrity.py

diff --git a/tools/update-subresource-integrity.py b/tools/update-subresource-integrity.py
deleted file mode 100755
index 0400c20..0000000
--- a/tools/update-subresource-integrity.py
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/python3
-# Updates subresource integrity attributes in management/templates/index.html
-# to prevent CDN-hosted resources from being used as an attack vector. Run this
-# after updating the Bootstrap and jQuery <link> and <script> to compute the
-# appropriate hash and insert it into the template.
-
-import re, urllib.request, hashlib, base64
-
-fn = "management/templates/index.html"
-
-with open(fn, 'r') as f:
-	content = f.read()
-
-def make_integrity(url):
-	resource = urllib.request.urlopen(url).read()
-	return "sha256-" + base64.b64encode(hashlib.sha256(resource).digest()).decode('ascii')
-
-content = re.sub(
-	r'<(link rel="stylesheet" href|script src)="(.*?)" integrity="(.*?)"',
-	lambda m : '<' + m.group(1) + '="' + m.group(2) + '" integrity="' + make_integrity(m.group(2)) + '"',
-	content)
-
-with open(fn, 'w') as f:
-	f.write(content)