aws / aws-northstar / 35683092278

92%

push

github

build: Stop emitting unreachable ace modes in the docs build (#1085)

ace-builds/webpack-resolver emits all 183 of ace's syntax modes and snippets as
separate assets, but the Cloudscape code editor only ever offers the 164
languages in its AceModes list. The remainder are published to the
documentation site unreachable.

One of them causes real trouble: ace's CSP highlighter (mode-csp.js) lists
'unsafe-eval' among the keywords it colourises. Automated scanners read that
keyword table as a live CSP directive and raise a finding, even though NorthStar
declares no Content-Security-Policy anywhere and the code editor already sets
useStrictCSP. Redirecting the unreachable modes to an inert stub removes the
false positive at its source and drops 39 files from the site.

plain_text stays emitted despite being absent from the AceModes list, since ace
falls back to it for unrecognised content.

The published library artifact is built by tsc and carries no ace assets, so
consumers keep the full language set.

402 of 480 branches covered (83.75%)

Branch coverage included in aggregate %.

1257 of 1324 relevant lines covered (94.94%)

195.41 hits per line