From dd23a449022307c79c5c5b07d6d45a66d6264bb0 Mon Sep 17 00:00:00 2001
From: ProgNovel <prognovel@gmail.com>
Date: Fri, 27 Mar 2020 18:02:56 +0800
Subject: [PATCH] add <script fundme> throw logic if MIME type not json

---
 RELEASE.md                                    |  2 ++
 dist/fundme-amd.js                            |  4 ++++
 dist/fundme-amd.min.js                        |  2 +-
 dist/fundme-cjs-compat.min.js                 |  2 +-
 dist/fundme-cjs.js                            |  4 ++++
 dist/fundme-iife-compat.min.js                |  2 +-
 dist/fundme-iife.js                           |  4 ++++
 dist/fundme-iife.min.js                       |  2 +-
 dist/fundme.mjs                               |  4 ++++
 dist/src/fund/errors.d.ts                     |  1 +
 src/fund/errors.ts                            |  2 ++
 src/fund/set-pointer-template.ts              |  6 +++++-
 .../template-scrape-from-script-json.spec.ts  | 19 +++++++++++++++++++
 13 files changed, 49 insertions(+), 5 deletions(-)

diff --git a/RELEASE.md b/RELEASE.md
index 6328102..e256a8b 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -3,6 +3,8 @@
 ## unreleased
 
 - Add examples for using fundme.js in the browser.
+- Now `<script fundme>` will throw an error if its type not `application/json`.
+- Test: add test for `<script fundme>` type.
 
 ## 0.0.3
 
diff --git a/dist/fundme-amd.js b/dist/fundme-amd.js
index aca9645..1eecdb8 100644
--- a/dist/fundme-amd.js
+++ b/dist/fundme-amd.js
@@ -53,6 +53,7 @@ define(['exports'], function (exports) { 'use strict';
   // script json template
   const cannotParseScriptJson = 'Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.';
   const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array.";
+  const scriptFundmeIsNotApplicationJson = 'Fundme.js: found <script fundme> but its type is not "application/json"';
 
   const DEFAULT_WEIGHT = 5;
   // TODO check pointer.address with RegEx
@@ -144,6 +145,9 @@ define(['exports'], function (exports) { 'use strict';
       catch (err) {
           throw new Error(cannotParseScriptJson);
       }
+      if (json.type !== 'application/json') {
+          throw new Error(scriptFundmeIsNotApplicationJson);
+      }
       if (Array.isArray(pointers)) {
           pointers = createPool(pointers);
       }
diff --git a/dist/fundme-amd.min.js b/dist/fundme-amd.min.js
index 99775a5..e7a2eb1 100644
--- a/dist/fundme-amd.min.js
+++ b/dist/fundme-amd.min.js
@@ -1 +1 @@
-define(["exports"],function(t){"use strict";function e(t){return function(t,e){t?t.content=e:t=function(t){const e=document.createElement("meta");return e.name="monetization",e.content=t,document.head.appendChild(e),e}(e);return t}(document.querySelector('meta[name="monetization"]'),t)}function n(t){e(t)}const r="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",o="Fundme.js: Invalid Web Monetization pointer address is given.",i="Fundme.js: address not found.",s="Fundme.js: address must be a string.";const u="Fundme.js: no monetization template is found.",a="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c=5;function l(t){e(function(t){const e=t.address;if(!e)throw new Error(i);if("string"!=typeof e)throw new Error(s);return e}(function(t){let e=function(t){return Math.random()*t}(function(t){const e=t.map(t=>t.weight);return Object.values(e).reduce((t,e)=>t+e,0)}(t));return function(t,e){for(const n in t)if((e-=t[n].weight)<=0)return t[n]}(t,e)}(m(t))))}function m(t){return t.map(t=>{let e;if("string"==typeof t&&(t={address:t,weight:c}),!("address"in t))throw new Error(i);return e=h(t)})}function h(t){return void 0!==t.weight&&NaN!==t.weight||(console.warn(`Fundme.js: ${t.address} has weight that is not a number. It has been set to ${c} (default).`),t.weight=c),t}const p="template[data-fund]",w="script[fundme]";function g(){const t=[...function(){const t=document.body.querySelectorAll(p);let e=[];t.length>0&&t.forEach(t=>{const n=function(t){let e=t.dataset.fund,n=void 0!==t.dataset.fundWeight?parseInt(t.dataset.fundWeight,0):c;if(!e)throw new Error(a);return h({address:e,weight:n})}(t);e=[...e,n]});return e}(),...function(){const t=document.body.querySelectorAll(w);let e=[];t.length>0&&t.forEach(t=>{e=function(t){let e=[];try{e=JSON.parse(t.innerHTML)}catch(t){throw new Error(d)}if(!Array.isArray(e))throw new Error(f);e=m(e);return e}(t)});return e}()];if(t.length>1)l(t);else{if(1!==t.length)throw new Error(u);n(t[0].address)}}let y,E;var j;function v(t){return E=t}!function(t){t.isSingle="single",t.isMultiple="multiple",t.isDefault="default",t.isFromTemplate="template",t.isUndefined="undefined"}(j||(j={})),t.fund=function(t,e){if("string"==typeof t){if("default"===t){if(void 0!==y)return"string"==typeof y?n(y):l(y),v(j.isDefault);throw new Error(r)}return n(t),v(j.isSingle)}if(i=t,Array.isArray(i))return l(t),v(j.isMultiple);var i;if(void 0===t)return g(),v(j.isFromTemplate);throw new Error(o)},t.setDefaultAddress=function(t){y=Array.isArray(t)?m(t):t},Object.defineProperty(t,"__esModule",{value:!0})});
\ No newline at end of file
+define(["exports"],function(t){"use strict";function e(t){return function(t,e){t?t.content=e:t=function(t){const e=document.createElement("meta");return e.name="monetization",e.content=t,document.head.appendChild(e),e}(e);return t}(document.querySelector('meta[name="monetization"]'),t)}function n(t){e(t)}const r="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",o="Fundme.js: Invalid Web Monetization pointer address is given.",i="Fundme.js: address not found.",s="Fundme.js: address must be a string.";const u="Fundme.js: no monetization template is found.",a="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c='Fundme.js: found <script fundme> but its type is not "application/json"',l=5;function m(t){e(function(t){const e=t.address;if(!e)throw new Error(i);if("string"!=typeof e)throw new Error(s);return e}(function(t){let e=function(t){return Math.random()*t}(function(t){const e=t.map(t=>t.weight);return Object.values(e).reduce((t,e)=>t+e,0)}(t));return function(t,e){for(const n in t)if((e-=t[n].weight)<=0)return t[n]}(t,e)}(p(t))))}function p(t){return t.map(t=>{let e;if("string"==typeof t&&(t={address:t,weight:l}),!("address"in t))throw new Error(i);return e=h(t)})}function h(t){return void 0!==t.weight&&NaN!==t.weight||(console.warn(`Fundme.js: ${t.address} has weight that is not a number. It has been set to ${l} (default).`),t.weight=l),t}const w="template[data-fund]",g="script[fundme]";function y(){const t=[...function(){const t=document.body.querySelectorAll(w);let e=[];t.length>0&&t.forEach(t=>{const n=function(t){let e=t.dataset.fund,n=void 0!==t.dataset.fundWeight?parseInt(t.dataset.fundWeight,0):l;if(!e)throw new Error(a);return h({address:e,weight:n})}(t);e=[...e,n]});return e}(),...function(){const t=document.body.querySelectorAll(g);let e=[];t.length>0&&t.forEach(t=>{e=function(t){let e=[];try{e=JSON.parse(t.innerHTML)}catch(t){throw new Error(d)}if("application/json"!==t.type)throw new Error(c);if(!Array.isArray(e))throw new Error(f);e=p(e);return e}(t)});return e}()];if(t.length>1)m(t);else{if(1!==t.length)throw new Error(u);n(t[0].address)}}let j,E;var F;function v(t){return E=t}!function(t){t.isSingle="single",t.isMultiple="multiple",t.isDefault="default",t.isFromTemplate="template",t.isUndefined="undefined"}(F||(F={})),t.fund=function(t,e){if("string"==typeof t){if("default"===t){if(void 0!==j)return"string"==typeof j?n(j):m(j),v(F.isDefault);throw new Error(r)}return n(t),v(F.isSingle)}if(i=t,Array.isArray(i))return m(t),v(F.isMultiple);var i;if(void 0===t)return y(),v(F.isFromTemplate);throw new Error(o)},t.setDefaultAddress=function(t){j=Array.isArray(t)?p(t):t},Object.defineProperty(t,"__esModule",{value:!0})});
\ No newline at end of file
diff --git a/dist/fundme-cjs-compat.min.js b/dist/fundme-cjs-compat.min.js
index 806fa66..3eb4596 100644
--- a/dist/fundme-cjs-compat.min.js
+++ b/dist/fundme-cjs-compat.min.js
@@ -1 +1 @@
-"use strict";function _toConsumableArray(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function isMultiplePointer(e){return Array.isArray(e)}function setWebMonetizationPointer(e){return setWebMonetizationTag(document.querySelector('meta[name="monetization"]'),e)}function setWebMonetizationTag(e,t){return e?e.content=t:e=createWebMonetizationTag(t),e}function createWebMonetizationTag(e){var t=document.createElement("meta");return t.name="monetization",t.content=e,document.head.appendChild(t),t}function getPoolWeightSum(e){var t=e.map(function(e){return e.weight});return Object.values(t).reduce(function(e,t){return e+t},0)}function getWinningPointer(e,t){for(var n in e){if((t-=e[n].weight)<=0)return e[n]}}function setPointerSingle(e){setWebMonetizationPointer(e)}Object.defineProperty(exports,"__esModule",{value:!0});var defaultAddressNotFound="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",invalidAddress="Fundme.js: Invalid Web Monetization pointer address is given.",addressNotFound="Fundme.js: address not found.",addressIsNotAString="Fundme.js: address must be a string.";function weightIsNotANumber(e){return"Fundme.js: "+e+" has weight that is not a number. It has been set to "+DEFAULT_WEIGHT+" (default)."}var noTemplateFound="Fundme.js: no monetization template is found.",failParsingTemplate="Fundme.js: fails to parse address from <template data-fund></template>.",cannotParseScriptJson="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",jsonTemplateIsNotArray="Fundme.js: found <script fundme> but it's not an array.",DEFAULT_WEIGHT=5;function setPointerMultiple(e){setWebMonetizationPointer(getPointerAddress(pickPointer(createPool(e))))}function getPointerAddress(e){var t=e.address;if(!t)throw new Error(addressNotFound);if("string"!=typeof t)throw new Error(addressIsNotAString);return t}function createPool(e){return e.map(function(e){if("string"==typeof e&&(e=convertToPointer(e)),!("address"in e))throw new Error(addressNotFound);return checkWeight(e)})}function checkWeight(e){return void 0!==e.weight&&NaN!==e.weight||(console.warn(weightIsNotANumber(e.address)),e.weight=DEFAULT_WEIGHT),e}function pickPointer(e){return getWinningPointer(e,getChoice(getPoolWeightSum(e)))}function getChoice(e){return Math.random()*e}function convertToPointer(e){return{address:e,weight:DEFAULT_WEIGHT}}var FUNDME_TEMPLATE_SELECTOR="template[data-fund]",FUNDME_JSON_SELECTOR="script[fundme]";function setPointerFromTemplates(){var e=[].concat(_toConsumableArray(scrapeTemplate()),_toConsumableArray(scrapeJson()));if(e.length>1)setPointerMultiple(e);else{if(1!==e.length)throw new Error(noTemplateFound);setPointerSingle(e[0].address)}}function scrapeJson(){var e=document.body.querySelectorAll(FUNDME_JSON_SELECTOR),t=[];return e.length>0&&e.forEach(function(e){t=parseScriptJson(e)}),t}function parseScriptJson(e){var t=[];try{t=JSON.parse(e.innerHTML)}catch(e){throw new Error(cannotParseScriptJson)}if(!Array.isArray(t))throw new Error(jsonTemplateIsNotArray);return t=createPool(t)}function scrapeTemplate(){var e=document.body.querySelectorAll(FUNDME_TEMPLATE_SELECTOR),t=[];return e.length>0&&e.forEach(function(e){var n=parseTemplate(e);t=[].concat(_toConsumableArray(t),[n])}),t}function parseTemplate(e){var t=e.dataset.fund,n=void 0!==e.dataset.fundWeight?parseInt(e.dataset.fundWeight,0):DEFAULT_WEIGHT;if(!t)throw new Error(failParsingTemplate);return checkWeight({address:t,weight:n})}var FundType,defaultAddress=void 0,currentFundType=void 0;function fund(e,t){if("string"==typeof e){if("default"===e){if(void 0!==defaultAddress)return"string"==typeof defaultAddress?setPointerSingle(defaultAddress):setPointerMultiple(defaultAddress),setFundType(FundType.isDefault);throw new Error(defaultAddressNotFound)}return setPointerSingle(e),setFundType(FundType.isSingle)}if(isMultiplePointer(e))return setPointerMultiple(e),setFundType(FundType.isMultiple);if(void 0===e)return setPointerFromTemplates(),setFundType(FundType.isFromTemplate);throw new Error(invalidAddress)}function setDefaultAddress(e){defaultAddress=Array.isArray(e)?createPool(e):e}function setFundType(e){return currentFundType=e}!function(e){e.isSingle="single",e.isMultiple="multiple",e.isDefault="default",e.isFromTemplate="template",e.isUndefined="undefined"}(FundType||(FundType={})),exports.fund=fund,exports.setDefaultAddress=setDefaultAddress;
+"use strict";function _toConsumableArray(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function isMultiplePointer(e){return Array.isArray(e)}function setWebMonetizationPointer(e){return setWebMonetizationTag(document.querySelector('meta[name="monetization"]'),e)}function setWebMonetizationTag(e,t){return e?e.content=t:e=createWebMonetizationTag(t),e}function createWebMonetizationTag(e){var t=document.createElement("meta");return t.name="monetization",t.content=e,document.head.appendChild(t),t}function getPoolWeightSum(e){var t=e.map(function(e){return e.weight});return Object.values(t).reduce(function(e,t){return e+t},0)}function getWinningPointer(e,t){for(var n in e){if((t-=e[n].weight)<=0)return e[n]}}function setPointerSingle(e){setWebMonetizationPointer(e)}Object.defineProperty(exports,"__esModule",{value:!0});var defaultAddressNotFound="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",invalidAddress="Fundme.js: Invalid Web Monetization pointer address is given.",addressNotFound="Fundme.js: address not found.",addressIsNotAString="Fundme.js: address must be a string.";function weightIsNotANumber(e){return"Fundme.js: "+e+" has weight that is not a number. It has been set to "+DEFAULT_WEIGHT+" (default)."}var noTemplateFound="Fundme.js: no monetization template is found.",failParsingTemplate="Fundme.js: fails to parse address from <template data-fund></template>.",cannotParseScriptJson="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",jsonTemplateIsNotArray="Fundme.js: found <script fundme> but it's not an array.",scriptFundmeIsNotApplicationJson='Fundme.js: found <script fundme> but its type is not "application/json"',DEFAULT_WEIGHT=5;function setPointerMultiple(e){setWebMonetizationPointer(getPointerAddress(pickPointer(createPool(e))))}function getPointerAddress(e){var t=e.address;if(!t)throw new Error(addressNotFound);if("string"!=typeof t)throw new Error(addressIsNotAString);return t}function createPool(e){return e.map(function(e){if("string"==typeof e&&(e=convertToPointer(e)),!("address"in e))throw new Error(addressNotFound);return checkWeight(e)})}function checkWeight(e){return void 0!==e.weight&&NaN!==e.weight||(console.warn(weightIsNotANumber(e.address)),e.weight=DEFAULT_WEIGHT),e}function pickPointer(e){return getWinningPointer(e,getChoice(getPoolWeightSum(e)))}function getChoice(e){return Math.random()*e}function convertToPointer(e){return{address:e,weight:DEFAULT_WEIGHT}}var FUNDME_TEMPLATE_SELECTOR="template[data-fund]",FUNDME_JSON_SELECTOR="script[fundme]";function setPointerFromTemplates(){var e=[].concat(_toConsumableArray(scrapeTemplate()),_toConsumableArray(scrapeJson()));if(e.length>1)setPointerMultiple(e);else{if(1!==e.length)throw new Error(noTemplateFound);setPointerSingle(e[0].address)}}function scrapeJson(){var e=document.body.querySelectorAll(FUNDME_JSON_SELECTOR),t=[];return e.length>0&&e.forEach(function(e){t=parseScriptJson(e)}),t}function parseScriptJson(e){var t=[];try{t=JSON.parse(e.innerHTML)}catch(e){throw new Error(cannotParseScriptJson)}if("application/json"!==e.type)throw new Error(scriptFundmeIsNotApplicationJson);if(!Array.isArray(t))throw new Error(jsonTemplateIsNotArray);return t=createPool(t)}function scrapeTemplate(){var e=document.body.querySelectorAll(FUNDME_TEMPLATE_SELECTOR),t=[];return e.length>0&&e.forEach(function(e){var n=parseTemplate(e);t=[].concat(_toConsumableArray(t),[n])}),t}function parseTemplate(e){var t=e.dataset.fund,n=void 0!==e.dataset.fundWeight?parseInt(e.dataset.fundWeight,0):DEFAULT_WEIGHT;if(!t)throw new Error(failParsingTemplate);return checkWeight({address:t,weight:n})}var FundType,defaultAddress=void 0,currentFundType=void 0;function fund(e,t){if("string"==typeof e){if("default"===e){if(void 0!==defaultAddress)return"string"==typeof defaultAddress?setPointerSingle(defaultAddress):setPointerMultiple(defaultAddress),setFundType(FundType.isDefault);throw new Error(defaultAddressNotFound)}return setPointerSingle(e),setFundType(FundType.isSingle)}if(isMultiplePointer(e))return setPointerMultiple(e),setFundType(FundType.isMultiple);if(void 0===e)return setPointerFromTemplates(),setFundType(FundType.isFromTemplate);throw new Error(invalidAddress)}function setDefaultAddress(e){defaultAddress=Array.isArray(e)?createPool(e):e}function setFundType(e){return currentFundType=e}!function(e){e.isSingle="single",e.isMultiple="multiple",e.isDefault="default",e.isFromTemplate="template",e.isUndefined="undefined"}(FundType||(FundType={})),exports.fund=fund,exports.setDefaultAddress=setDefaultAddress;
diff --git a/dist/fundme-cjs.js b/dist/fundme-cjs.js
index 7c32621..8ecc680 100644
--- a/dist/fundme-cjs.js
+++ b/dist/fundme-cjs.js
@@ -55,6 +55,7 @@ const failParsingTemplate = 'Fundme.js: fails to parse address from <template da
 // script json template
 const cannotParseScriptJson = 'Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.';
 const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array.";
+const scriptFundmeIsNotApplicationJson = 'Fundme.js: found <script fundme> but its type is not "application/json"';
 
 const DEFAULT_WEIGHT = 5;
 // TODO check pointer.address with RegEx
@@ -146,6 +147,9 @@ function parseScriptJson(json) {
     catch (err) {
         throw new Error(cannotParseScriptJson);
     }
+    if (json.type !== 'application/json') {
+        throw new Error(scriptFundmeIsNotApplicationJson);
+    }
     if (Array.isArray(pointers)) {
         pointers = createPool(pointers);
     }
diff --git a/dist/fundme-iife-compat.min.js b/dist/fundme-iife-compat.min.js
index d1c7256..2e135d2 100644
--- a/dist/fundme-iife-compat.min.js
+++ b/dist/fundme-iife-compat.min.js
@@ -1 +1 @@
-"use strict";function _toConsumableArray(r){if(Array.isArray(r)){for(var t=0,n=Array(r.length);t<r.length;t++)n[t]=r[t];return n}return Array.from(r)}var fundme=function(r){function t(r){return function(r,t){r?r.content=t:r=function(r){var t=document.createElement("meta");return t.name="monetization",t.content=r,document.head.appendChild(t),t}(t);return r}(document.querySelector('meta[name="monetization"]'),r)}function n(r){t(r)}var e="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",a="Fundme.js: Invalid Web Monetization pointer address is given.",i="Fundme.js: address not found.",o="Fundme.js: address must be a string.";var u="Fundme.js: no monetization template is found.",s="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c=5;function l(r){t(function(r){var t=r.address;if(!t)throw new Error(i);if("string"!=typeof t)throw new Error(o);return t}(function(r){var t=function(r){return Math.random()*r}(function(r){var t=r.map(function(r){return r.weight});return Object.values(t).reduce(function(r,t){return r+t},0)}(r));return function(r,t){for(var n in r)if((t-=r[n].weight)<=0)return r[n]}(r,t)}(m(r))))}function m(r){return r.map(function(r){if("string"==typeof r&&(r={address:r,weight:c}),!("address"in r))throw new Error(i);return h(r)})}function h(r){return void 0!==r.weight&&NaN!==r.weight||(console.warn("Fundme.js: "+r.address+" has weight that is not a number. It has been set to "+c+" (default)."),r.weight=c),r}var v="template[data-fund]",w="script[fundme]";function g(){var r=[].concat(_toConsumableArray(function(){var r=document.body.querySelectorAll(v),t=[];r.length>0&&r.forEach(function(r){var n=function(r){var t=r.dataset.fund,n=void 0!==r.dataset.fundWeight?parseInt(r.dataset.fundWeight,0):c;if(!t)throw new Error(s);return h({address:t,weight:n})}(r);t=[].concat(_toConsumableArray(t),[n])});return t}()),_toConsumableArray(function(){var r=document.body.querySelectorAll(w),t=[];r.length>0&&r.forEach(function(r){t=function(r){var t=[];try{t=JSON.parse(r.innerHTML)}catch(r){throw new Error(d)}if(!Array.isArray(t))throw new Error(f);t=m(t);return t}(r)});return t}()));if(r.length>1)l(r);else{if(1!==r.length)throw new Error(u);n(r[0].address)}}var p,y=void 0;function A(r){return r}return function(r){r.isSingle="single",r.isMultiple="multiple",r.isDefault="default",r.isFromTemplate="template",r.isUndefined="undefined"}(p||(p={})),r.fund=function(r,t){if("string"==typeof r){if("default"===r){if(void 0!==y)return"string"==typeof y?n(y):l(y),A(p.isDefault);throw new Error(e)}return n(r),A(p.isSingle)}if(i=r,Array.isArray(i))return l(r),A(p.isMultiple);var i;if(void 0===r)return g(),A(p.isFromTemplate);throw new Error(a)},r.setDefaultAddress=function(r){y=Array.isArray(r)?m(r):r},r}({});
+"use strict";function _toConsumableArray(r){if(Array.isArray(r)){for(var t=0,n=Array(r.length);t<r.length;t++)n[t]=r[t];return n}return Array.from(r)}var fundme=function(r){function t(r){return function(r,t){r?r.content=t:r=function(r){var t=document.createElement("meta");return t.name="monetization",t.content=r,document.head.appendChild(t),t}(t);return r}(document.querySelector('meta[name="monetization"]'),r)}function n(r){t(r)}var e="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",i="Fundme.js: Invalid Web Monetization pointer address is given.",o="Fundme.js: address not found.",a="Fundme.js: address must be a string.";var u="Fundme.js: no monetization template is found.",s="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c='Fundme.js: found <script fundme> but its type is not "application/json"',l=5;function m(r){t(function(r){var t=r.address;if(!t)throw new Error(o);if("string"!=typeof t)throw new Error(a);return t}(function(r){var t=function(r){return Math.random()*r}(function(r){var t=r.map(function(r){return r.weight});return Object.values(t).reduce(function(r,t){return r+t},0)}(r));return function(r,t){for(var n in r)if((t-=r[n].weight)<=0)return r[n]}(r,t)}(h(r))))}function h(r){return r.map(function(r){if("string"==typeof r&&(r={address:r,weight:l}),!("address"in r))throw new Error(o);return p(r)})}function p(r){return void 0!==r.weight&&NaN!==r.weight||(console.warn("Fundme.js: "+r.address+" has weight that is not a number. It has been set to "+l+" (default)."),r.weight=l),r}var w="template[data-fund]",v="script[fundme]";function y(){var r=[].concat(_toConsumableArray(function(){var r=document.body.querySelectorAll(w),t=[];r.length>0&&r.forEach(function(r){var n=function(r){var t=r.dataset.fund,n=void 0!==r.dataset.fundWeight?parseInt(r.dataset.fundWeight,0):l;if(!t)throw new Error(s);return p({address:t,weight:n})}(r);t=[].concat(_toConsumableArray(t),[n])});return t}()),_toConsumableArray(function(){var r=document.body.querySelectorAll(v),t=[];r.length>0&&r.forEach(function(r){t=function(r){var t=[];try{t=JSON.parse(r.innerHTML)}catch(r){throw new Error(d)}if("application/json"!==r.type)throw new Error(c);if(!Array.isArray(t))throw new Error(f);t=h(t);return t}(r)});return t}()));if(r.length>1)m(r);else{if(1!==r.length)throw new Error(u);n(r[0].address)}}var g,A=void 0;function b(r){return r}return function(r){r.isSingle="single",r.isMultiple="multiple",r.isDefault="default",r.isFromTemplate="template",r.isUndefined="undefined"}(g||(g={})),r.fund=function(r,t){if("string"==typeof r){if("default"===r){if(void 0!==A)return"string"==typeof A?n(A):m(A),b(g.isDefault);throw new Error(e)}return n(r),b(g.isSingle)}if(o=r,Array.isArray(o))return m(r),b(g.isMultiple);var o;if(void 0===r)return y(),b(g.isFromTemplate);throw new Error(i)},r.setDefaultAddress=function(r){A=Array.isArray(r)?h(r):r},r}({});
diff --git a/dist/fundme-iife.js b/dist/fundme-iife.js
index 0804958..c893aee 100644
--- a/dist/fundme-iife.js
+++ b/dist/fundme-iife.js
@@ -54,6 +54,7 @@ var fundme = (function (exports) {
   // script json template
   const cannotParseScriptJson = 'Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.';
   const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array.";
+  const scriptFundmeIsNotApplicationJson = 'Fundme.js: found <script fundme> but its type is not "application/json"';
 
   const DEFAULT_WEIGHT = 5;
   // TODO check pointer.address with RegEx
@@ -145,6 +146,9 @@ var fundme = (function (exports) {
       catch (err) {
           throw new Error(cannotParseScriptJson);
       }
+      if (json.type !== 'application/json') {
+          throw new Error(scriptFundmeIsNotApplicationJson);
+      }
       if (Array.isArray(pointers)) {
           pointers = createPool(pointers);
       }
diff --git a/dist/fundme-iife.min.js b/dist/fundme-iife.min.js
index c98a557..430214d 100644
--- a/dist/fundme-iife.min.js
+++ b/dist/fundme-iife.min.js
@@ -1 +1 @@
-var fundme=function(t){"use strict";function e(t){return function(t,e){t?t.content=e:t=function(t){const e=document.createElement("meta");return e.name="monetization",e.content=t,document.head.appendChild(e),e}(e);return t}(document.querySelector('meta[name="monetization"]'),t)}function n(t){e(t)}const r="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",i="Fundme.js: Invalid Web Monetization pointer address is given.",o="Fundme.js: address not found.",s="Fundme.js: address must be a string.";const u="Fundme.js: no monetization template is found.",a="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c=5;function l(t){e(function(t){const e=t.address;if(!e)throw new Error(o);if("string"!=typeof e)throw new Error(s);return e}(function(t){let e=function(t){return Math.random()*t}(function(t){const e=t.map(t=>t.weight);return Object.values(e).reduce((t,e)=>t+e,0)}(t));return function(t,e){for(const n in t)if((e-=t[n].weight)<=0)return t[n]}(t,e)}(m(t))))}function m(t){return t.map(t=>{let e;if("string"==typeof t&&(t={address:t,weight:c}),!("address"in t))throw new Error(o);return e=h(t)})}function h(t){return void 0!==t.weight&&NaN!==t.weight||(console.warn(`Fundme.js: ${t.address} has weight that is not a number. It has been set to ${c} (default).`),t.weight=c),t}const w="template[data-fund]",p="script[fundme]";function g(){const t=[...function(){const t=document.body.querySelectorAll(w);let e=[];t.length>0&&t.forEach(t=>{const n=function(t){let e=t.dataset.fund,n=void 0!==t.dataset.fundWeight?parseInt(t.dataset.fundWeight,0):c;if(!e)throw new Error(a);return h({address:e,weight:n})}(t);e=[...e,n]});return e}(),...function(){const t=document.body.querySelectorAll(p);let e=[];t.length>0&&t.forEach(t=>{e=function(t){let e=[];try{e=JSON.parse(t.innerHTML)}catch(t){throw new Error(d)}if(!Array.isArray(e))throw new Error(f);e=m(e);return e}(t)});return e}()];if(t.length>1)l(t);else{if(1!==t.length)throw new Error(u);n(t[0].address)}}let y,E;var v;function F(t){return E=t}return function(t){t.isSingle="single",t.isMultiple="multiple",t.isDefault="default",t.isFromTemplate="template",t.isUndefined="undefined"}(v||(v={})),t.fund=function(t,e){if("string"==typeof t){if("default"===t){if(void 0!==y)return"string"==typeof y?n(y):l(y),F(v.isDefault);throw new Error(r)}return n(t),F(v.isSingle)}if(o=t,Array.isArray(o))return l(t),F(v.isMultiple);var o;if(void 0===t)return g(),F(v.isFromTemplate);throw new Error(i)},t.setDefaultAddress=function(t){y=Array.isArray(t)?m(t):t},t}({});
\ No newline at end of file
+var fundme=function(t){"use strict";function e(t){return function(t,e){t?t.content=e:t=function(t){const e=document.createElement("meta");return e.name="monetization",e.content=t,document.head.appendChild(e),e}(e);return t}(document.querySelector('meta[name="monetization"]'),t)}function n(t){e(t)}const r="Fundme.js: default address not found. Use setDefaultAddress(str: string) to set it first.",i="Fundme.js: Invalid Web Monetization pointer address is given.",o="Fundme.js: address not found.",s="Fundme.js: address must be a string.";const u="Fundme.js: no monetization template is found.",a="Fundme.js: fails to parse address from <template data-fund></template>.",d="Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.",f="Fundme.js: found <script fundme> but it's not an array.",c='Fundme.js: found <script fundme> but its type is not "application/json"',l=5;function m(t){e(function(t){const e=t.address;if(!e)throw new Error(o);if("string"!=typeof e)throw new Error(s);return e}(function(t){let e=function(t){return Math.random()*t}(function(t){const e=t.map(t=>t.weight);return Object.values(e).reduce((t,e)=>t+e,0)}(t));return function(t,e){for(const n in t)if((e-=t[n].weight)<=0)return t[n]}(t,e)}(h(t))))}function h(t){return t.map(t=>{let e;if("string"==typeof t&&(t={address:t,weight:l}),!("address"in t))throw new Error(o);return e=p(t)})}function p(t){return void 0!==t.weight&&NaN!==t.weight||(console.warn(`Fundme.js: ${t.address} has weight that is not a number. It has been set to ${l} (default).`),t.weight=l),t}const w="template[data-fund]",g="script[fundme]";function y(){const t=[...function(){const t=document.body.querySelectorAll(w);let e=[];t.length>0&&t.forEach(t=>{const n=function(t){let e=t.dataset.fund,n=void 0!==t.dataset.fundWeight?parseInt(t.dataset.fundWeight,0):l;if(!e)throw new Error(a);return p({address:e,weight:n})}(t);e=[...e,n]});return e}(),...function(){const t=document.body.querySelectorAll(g);let e=[];t.length>0&&t.forEach(t=>{e=function(t){let e=[];try{e=JSON.parse(t.innerHTML)}catch(t){throw new Error(d)}if("application/json"!==t.type)throw new Error(c);if(!Array.isArray(e))throw new Error(f);e=h(e);return e}(t)});return e}()];if(t.length>1)m(t);else{if(1!==t.length)throw new Error(u);n(t[0].address)}}let j,E;var F;function v(t){return E=t}return function(t){t.isSingle="single",t.isMultiple="multiple",t.isDefault="default",t.isFromTemplate="template",t.isUndefined="undefined"}(F||(F={})),t.fund=function(t,e){if("string"==typeof t){if("default"===t){if(void 0!==j)return"string"==typeof j?n(j):m(j),v(F.isDefault);throw new Error(r)}return n(t),v(F.isSingle)}if(o=t,Array.isArray(o))return m(t),v(F.isMultiple);var o;if(void 0===t)return y(),v(F.isFromTemplate);throw new Error(i)},t.setDefaultAddress=function(t){j=Array.isArray(t)?h(t):t},t}({});
\ No newline at end of file
diff --git a/dist/fundme.mjs b/dist/fundme.mjs
index 30d52f9..8a72add 100644
--- a/dist/fundme.mjs
+++ b/dist/fundme.mjs
@@ -51,6 +51,7 @@ const failParsingTemplate = 'Fundme.js: fails to parse address from <template da
 // script json template
 const cannotParseScriptJson = 'Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.';
 const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array.";
+const scriptFundmeIsNotApplicationJson = 'Fundme.js: found <script fundme> but its type is not "application/json"';
 
 const DEFAULT_WEIGHT = 5;
 // TODO check pointer.address with RegEx
@@ -142,6 +143,9 @@ function parseScriptJson(json) {
     catch (err) {
         throw new Error(cannotParseScriptJson);
     }
+    if (json.type !== 'application/json') {
+        throw new Error(scriptFundmeIsNotApplicationJson);
+    }
     if (Array.isArray(pointers)) {
         pointers = createPool(pointers);
     }
diff --git a/dist/src/fund/errors.d.ts b/dist/src/fund/errors.d.ts
index 17f0107..918d224 100644
--- a/dist/src/fund/errors.d.ts
+++ b/dist/src/fund/errors.d.ts
@@ -11,3 +11,4 @@ export declare const failParsingTemplate = "Fundme.js: fails to parse address fr
 export declare const templateSinglePointerHasWeight = "Fundme.js: found single <template data-fund></template> but has weight - only address will be parsed.";
 export declare const cannotParseScriptJson = "Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.";
 export declare const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array.";
+export declare const scriptFundmeIsNotApplicationJson = "Fundme.js: found <script fundme> but its type is not \"application/json\"";
diff --git a/src/fund/errors.ts b/src/fund/errors.ts
index 7fcaab0..432f483 100644
--- a/src/fund/errors.ts
+++ b/src/fund/errors.ts
@@ -25,3 +25,5 @@ export const templateSinglePointerHasWeight =
 export const cannotParseScriptJson =
   'Fundme.js: cannot parse JSON from <script fundme>. Make sure it contains a valid JSON.'
 export const jsonTemplateIsNotArray = "Fundme.js: found <script fundme> but it's not an array."
+export const scriptFundmeIsNotApplicationJson =
+  'Fundme.js: found <script fundme> but its type is not "application/json"'
diff --git a/src/fund/set-pointer-template.ts b/src/fund/set-pointer-template.ts
index 387514a..7a591ac 100644
--- a/src/fund/set-pointer-template.ts
+++ b/src/fund/set-pointer-template.ts
@@ -3,7 +3,7 @@ import { setPointerSingle } from './set-pointer-single'
 import {
   noTemplateFound,
   failParsingTemplate,
-  templateSinglePointerHasWeight,
+  scriptFundmeIsNotApplicationJson,
   cannotParseScriptJson,
   jsonTemplateIsNotArray,
 } from './errors'
@@ -50,6 +50,10 @@ function parseScriptJson(json: HTMLScriptElement): WMPointer[] {
     throw new Error(cannotParseScriptJson)
   }
 
+  if (json.type !== 'application/json') {
+    throw new Error(scriptFundmeIsNotApplicationJson)
+  }
+
   if (Array.isArray(pointers)) {
     pointers = createPool(pointers)
   } else {
diff --git a/src/fund/tests/template-scrape-from-script-json.spec.ts b/src/fund/tests/template-scrape-from-script-json.spec.ts
index 42d950b..dc0b698 100644
--- a/src/fund/tests/template-scrape-from-script-json.spec.ts
+++ b/src/fund/tests/template-scrape-from-script-json.spec.ts
@@ -1,6 +1,7 @@
 import { fund, getCurrentPointerPool } from '../main'
 
 import { toBeInTheDocument, toHaveAttribute } from '@testing-library/jest-dom/matchers'
+import { scriptFundmeIsNotApplicationJson } from '../errors'
 
 expect.extend({ toBeInTheDocument, toHaveAttribute })
 
@@ -24,4 +25,22 @@ describe('parsing fundme template from a JSON array', () => {
     expect(pool[1].weight).toBe(8)
     document.body.innerHTML = ''
   })
+
+  test('<script fundme> must have MIME type "application/json"', () => {
+    // const pointerAddress = '$coil.com/pointer-address1'
+    document.body.innerHTML = `
+      <script fundme>
+        [
+          "$coil.com/my-pointer",
+          {
+            "address": "$xrp.com/tip-my-content",
+            "weight": 8
+          }
+        ]
+      </script>
+    `
+    // @ts-ignore
+    expect(() => fund()).toThrowError(scriptFundmeIsNotApplicationJson)
+    document.body.innerHTML = ''
+  })
 })