Skip to content

Keep generated viewer offline by default - #24

Draft
YoungJinJung wants to merge 1 commit into
mainfrom
issue-19-offline-html
Draft

Keep generated viewer offline by default#24
YoungJinJung wants to merge 1 commit into
mainfrom
issue-19-offline-html

Conversation

@YoungJinJung

Copy link
Copy Markdown
Contributor

Summary

  • Remove remote Tailwind and D3 CDN script tags from generated index.html.
  • Replace the D3 viewer dependency with a small inline SVG renderer so reports remain self-contained by default.
  • Add a regression test that generated HTML contains no remote script tags.

Closes #19.

Validation

  • npm test
  • node --check quarkify.mjs

@YoungJinJung

Copy link
Copy Markdown
Contributor Author

Cross-platform note: #27 adds the Windows/macOS/Linux CI matrix that should validate this change across supported operating systems before release.

The generated topology viewer no longer loads Tailwind or D3 from remote CDNs. A small inline SVG renderer keeps the default report local-first and avoids executing unpinned third-party scripts when users open index.html.

Constraint: Keep the generated report self-contained without adding dependencies.
Rejected: Add SRI to CDN scripts | still makes local reports execute third-party code and require network access.
Confidence: high
Scope-risk: moderate
Directive: Do not reintroduce remote script tags in default generated HTML without an explicit opt-in mode.
Tested: npm test; node --check quarkify.mjs
Related: #19
@YoungJinJung
YoungJinJung force-pushed the issue-19-offline-html branch from a7e75c7 to 1fd1e2b Compare June 16, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove or pin remote scripts in generated standalone HTML

1 participant