diff options
| author | Danilo M. <danix@danix.xyz> | 2026-04-30 14:07:52 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-04-30 14:07:52 +0200 |
| commit | 976c36b0cbb6c8bb6f9a0a3398a4229da8cb5834 (patch) | |
| tree | 136c2c3b27f6f7149d32274092f2657d149dde95 | |
| parent | 00d3e716656c1109421f4d89f3effd871c89003c (diff) | |
| download | danixxyz-theme-976c36b0cbb6c8bb6f9a0a3398a4229da8cb5834.tar.gz danixxyz-theme-976c36b0cbb6c8bb6f9a0a3398a4229da8cb5834.zip | |
security: add SRI integrity hashes and pin CDN versions
| -rw-r--r-- | layouts/_default/baseof.html | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html index 1ab4a9c..aa89a69 100644 --- a/layouts/_default/baseof.html +++ b/layouts/_default/baseof.html @@ -13,7 +13,7 @@ <link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400;500;600;700&family=JetBrains+Mono:wght@400;600&family=Oxanium:wght@400;600;700&display=swap" rel="stylesheet"> <!-- Feather Icons --> - <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.css"> + <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/feather-icons@4.29.2/dist/feather.min.css" integrity="sha384-l+dfoAZRxRWx6FVzgdHf+GcpG5MTGLpAO9QovPXcfVRUWatgaAHF/iAUup9G5XOd" crossorigin="anonymous"> <!-- Tailwind CSS --> {{ $css := resources.Get "css/main.min.css" }} @@ -73,10 +73,10 @@ {{ partial "search-modal.html" . }} <!-- Alpine.js --> - <script src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js" defer></script> + <script src="https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js" integrity="sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be" crossorigin="anonymous" defer></script> <!-- Feather Icons initialization --> - <script src="https://cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.js"></script> + <script src="https://cdn.jsdelivr.net/npm/feather-icons@4.29.2/dist/feather.min.js" integrity="sha384-qEqAs1VsN9WH2myXDbiP2wGGIttL9bMRZBKCl54ZnzpDlVqbYANP9vMaoT/wvQcf" crossorigin="anonymous"></script> <script>feather.replace();</script> <!-- Theme toggle script --> @@ -109,7 +109,7 @@ <!-- Twemoji: consistent cross-platform emoji rendering on article pages --> {{ if eq .Kind "page" }} - <script src="https://cdn.jsdelivr.net/npm/twemoji@14.1.2/dist/twemoji.min.js" crossorigin="anonymous" defer></script> + <script src="https://cdn.jsdelivr.net/npm/twemoji@14.1.2/dist/twemoji.min.js" integrity="sha384-ws2weVvlLu+TpdEqhKEpn5zF3I5w4UgPzl43Rx6weg3rOegMzGBd0S7sXwse8oAC" crossorigin="anonymous" defer></script> {{ $twemojiScript := resources.Get "js/twemoji-init.js" | minify }} <script src="{{ $twemojiScript.RelPermalink }}" defer></script> {{ end }} |