Render math with MathJax (pypi#12028)

* chore(deps): upgrade readme-renderer

The latest release includes the necessary changes to render the HTML
correctly for RST with Math directives.

Refs: https://github.com/pypa/readme_renderer/releases/tag/36.0

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

* feat: include mathjax

Follows installation instructions from docs.
See https://docs.mathjax.org/en/latest/web/start.html#using-mathjax-from-a-content-delivery-network-cdn
Using the TeX+SVG variant to keep it lightweight.

Loads from a CDN with SRI hashes, and restricts the Content Security
Policy narrowly to prevent any other calls being made to anything
unrelated to the MathJax package.

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

* Revert "feat: include mathjax"

This reverts commit 642ce88.

* feat: include mathjax as vendored

MathJax 3.2.2

Files required for `tex-svg.js` to load and execute

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

* feat: include mathjax

Follows installation instructions from docs.
See https://docs.mathjax.org/en/latest/web/start.html#using-mathjax-from-a-content-delivery-network-cdn
Using the TeX+SVG variant to keep it lightweight.

Loads from a CDN with SRI hashes, and restricts the Content Security
Policy narrowly to prevent any other calls being made to anything
unrelated to the MathJax package.

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

* Revert "feat: include mathjax"

This reverts commit 642ce88.

* feat: include mathjax as vendored

MathJax 3.2.2

Files required for `tex-svg.js` to load and execute

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

requirements/main.in

@@ -46,7 +46,7 @@ pyramid_services>=2.1
 pyramid_tm>=0.12
 python-slugify
 PyJWT[crypto]>=2.3.0
-readme-renderer[md]>=0.7.0
+readme-renderer[md]>=36.0
 requests
 requests-aws4auth
 redis>=2.8.0,<5.0.0

tests/unit/test_csp.py

@@ -233,6 +233,10 @@ def test_includeme():
                         "*.ethicalads.io",
                         "'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM='",
                         "'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",
+                        "'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE='",
+                        "'sha256-mQyxHEuwZJqpxCw3SLmc4YOySNKXunyu2Oiz1r3/wAE='",
+                        "'sha256-OCf+kv5Asiwp++8PIevKBYSgnNLNUZvxAp4a7wMLuKA='",
+                        "'sha256-h5LOiLhk6wiJrGsG5ItM0KimwzWQH/yAcmoJDJL//bY='",
                     ],
                     "worker-src": ["*.fastly-insights.com"],
                 }

warehouse/csp.py

@@ -118,6 +118,11 @@ def includeme(config):
                     # Hashes for inline styles generated by v1.4.0 of ethicalads.min.js
                     "'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM='",
                     "'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",
+                    # Hashes for inline styles generated by v3.2.2 of MathJax tex-svg.js
+                    "'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE='",
+                    "'sha256-mQyxHEuwZJqpxCw3SLmc4YOySNKXunyu2Oiz1r3/wAE='",
+                    "'sha256-OCf+kv5Asiwp++8PIevKBYSgnNLNUZvxAp4a7wMLuKA='",
+                    "'sha256-h5LOiLhk6wiJrGsG5ItM0KimwzWQH/yAcmoJDJL//bY='",
                 ],
                 "worker-src": ["*.fastly-insights.com"],
             }