Skip to content

Commit d55833f

Browse files
committed
fix: add SRIs to scripts
1 parent 507fcdf commit d55833f

19 files changed

Lines changed: 63 additions & 18 deletions

File tree

templates/anbox-cloud/index.html

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,9 @@
1212

1313
{% block extra_metatags %}
1414
<script type="module"
15-
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js"></script>
15+
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1.9.0/lite-youtube.min.js"
16+
integrity="sha384-krUlgvxdz2iSLnbpvxj8zLWWUCa3QxzwLbW3EXmbzXCoAQ+ANH1cWJYRMc/TErh+"
17+
crossorigin="anonymous"></script>
1618
{% endblock extra_metatags %}
1719

1820
{% block body_class %}

templates/base_index.html

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,8 @@
108108
crossorigin />
109109

110110
<script src="https://assets.ubuntu.com/v1/703e23c9-lazysizes+noscript+native-loading.5.1.2.min.js"
111+
integrity="sha384-TI/T2gDQjjlI4xuVcADfKuha0uICGVNowMXFblCWGz6MMkwVNIEuc59dlu6rQuNE"
112+
crossorigin="anonymous"
111113
defer></script>
112114

113115
<link rel="stylesheet" type="text/css" media="screen" href="{{ versioned_static("css/styles.css") }}" />

templates/careers/_base-department.html

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -207,4 +207,7 @@ <h3 class="p-heading--2">
207207
{% include custom_blog_section %}
208208
{% endif %}
209209

210-
<script async defer src="https://buttons.github.io/buttons.js"></script>
210+
<script async defer
211+
src="https://cdn.jsdelivr.net/npm/github-buttons@2.32.0/dist/buttons.min.js"
212+
integrity="sha384-ZhcuGDV+Yp73dqAwwf9TcmQydIjkGkv+3oJxfQFaadDitRkt+COogTczHw8CTFgH"
213+
crossorigin="anonymous"></script>

templates/careers/company-culture/progression.html

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -395,5 +395,7 @@ <h2 class="p-text--x-small-capitalised u-align-text--x-small-to-default">Departm
395395
<script type="text/javascript"
396396
src="{{ versioned_static('js/careers-progression.js') }}"></script>
397397
<script type="module"
398-
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js"></script>
398+
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1.9.0/lite-youtube.min.js"
399+
integrity="sha384-krUlgvxdz2iSLnbpvxj8zLWWUCa3QxzwLbW3EXmbzXCoAQ+ANH1cWJYRMc/TErh+"
400+
crossorigin="anonymous"></script>
399401
{% endblock %}

templates/careers/hiring-process/index.html

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,9 @@
1414

1515
{% block extra_metatags %}
1616
<script type="module"
17-
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js"></script>
17+
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1.9.0/lite-youtube.min.js"
18+
integrity="sha384-krUlgvxdz2iSLnbpvxj8zLWWUCa3QxzwLbW3EXmbzXCoAQ+ANH1cWJYRMc/TErh+"
19+
crossorigin="anonymous"></script>
1820
{% endblock extra_metatags %}
1921

2022
{% block body_class %}

templates/company/index.html

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -389,6 +389,8 @@ <h3 class="p-heading--5">Get news from The Source</h3>
389389
<script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCiUVShD6fwLGQ8_iF-sCclFkVQFCsazxc&callback=initMap&v=weekly"
390390
defer></script>
391391
<script type="module"
392-
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js"></script>
392+
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1.9.0/lite-youtube.min.js"
393+
integrity="sha384-krUlgvxdz2iSLnbpvxj8zLWWUCa3QxzwLbW3EXmbzXCoAQ+ANH1cWJYRMc/TErh+"
394+
crossorigin="anonymous"></script>
393395

394396
{% endblock %}

templates/data/spark/index.html

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -405,5 +405,7 @@ <h3 class="p-heading--5">
405405
{{ load_form("/data/spark") | safe }}
406406

407407
<script type="module"
408-
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js"></script>
408+
src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1.9.0/lite-youtube.min.js"
409+
integrity="sha384-krUlgvxdz2iSLnbpvxj8zLWWUCa3QxzwLbW3EXmbzXCoAQ+ANH1cWJYRMc/TErh+"
410+
crossorigin="anonymous"></script>
409411
{% endblock %}

templates/dqlite/index.html

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -203,5 +203,8 @@ <h2>Why Raft?</h2>
203203
</div>
204204
</section>
205205

206-
<script async defer src="https://buttons.github.io/buttons.js"></script>
206+
<script async defer
207+
src="https://cdn.jsdelivr.net/npm/github-buttons@2.32.0/dist/buttons.min.js"
208+
integrity="sha384-ZhcuGDV+Yp73dqAwwf9TcmQydIjkGkv+3oJxfQFaadDitRkt+COogTczHw8CTFgH"
209+
crossorigin="anonymous"></script>
207210
{% endblock content %}

templates/jaas/index.html

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -721,6 +721,9 @@ <h3 class="p-heading--5">Read more</h3>
721721
{{ load_form("/jaas") | safe }}
722722

723723
<script src="{{ versioned_static('js/tabbed-content.js') }}" defer></script>
724-
<script async defer src="https://buttons.github.io/buttons.js"></script>
724+
<script async defer
725+
src="https://cdn.jsdelivr.net/npm/github-buttons@2.32.0/dist/buttons.min.js"
726+
integrity="sha384-ZhcuGDV+Yp73dqAwwf9TcmQydIjkGkv+3oJxfQFaadDitRkt+COogTczHw8CTFgH"
727+
crossorigin="anonymous"></script>
725728

726729
{% endblock content %}

templates/juju/index.html

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1221,5 +1221,8 @@ <h3 class="p-heading--5">Read more</h3>
12211221
{{ load_form("/juju") | safe }}
12221222

12231223
<script src="{{ versioned_static('js/tabbed-content.js') }}" defer></script>
1224-
<script async defer src="https://buttons.github.io/buttons.js"></script>
1224+
<script async defer
1225+
src="https://cdn.jsdelivr.net/npm/github-buttons@2.32.0/dist/buttons.min.js"
1226+
integrity="sha384-ZhcuGDV+Yp73dqAwwf9TcmQydIjkGkv+3oJxfQFaadDitRkt+COogTczHw8CTFgH"
1227+
crossorigin="anonymous"></script>
12251228
{% endblock %}

0 commit comments

Comments
 (0)