From 976c36b0cbb6c8bb6f9a0a3398a4229da8cb5834 Mon Sep 17 00:00:00 2001
From: "Danilo M." <danix@danix.xyz>
Date: Thu, 30 Apr 2026 14:07:52 +0200
Subject: security: add SRI integrity hashes and pin CDN versions

---
 layouts/_default/baseof.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'layouts')

diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html
index 1ab4a9c..aa89a69 100644
--- a/layouts/_default/baseof.html
+++ b/layouts/_default/baseof.html
@@ -13,7 +13,7 @@
   <link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400;500;600;700&family=JetBrains+Mono:wght@400;600&family=Oxanium:wght@400;600;700&display=swap" rel="stylesheet">
 
   <!-- Feather Icons -->
-  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.css">
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/feather-icons@4.29.2/dist/feather.min.css" integrity="sha384-l+dfoAZRxRWx6FVzgdHf+GcpG5MTGLpAO9QovPXcfVRUWatgaAHF/iAUup9G5XOd" crossorigin="anonymous">
 
   <!-- Tailwind CSS -->
   {{ $css := resources.Get "css/main.min.css" }}
@@ -73,10 +73,10 @@
   {{ partial "search-modal.html" . }}
 
   <!-- Alpine.js -->
-  <script src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js" defer></script>
+  <script src="https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js" integrity="sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be" crossorigin="anonymous" defer></script>
 
   <!-- Feather Icons initialization -->
-  <script src="https://cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/feather-icons@4.29.2/dist/feather.min.js" integrity="sha384-qEqAs1VsN9WH2myXDbiP2wGGIttL9bMRZBKCl54ZnzpDlVqbYANP9vMaoT/wvQcf" crossorigin="anonymous"></script>
   <script>feather.replace();</script>
 
   <!-- Theme toggle script -->
@@ -109,7 +109,7 @@
 
   <!-- Twemoji: consistent cross-platform emoji rendering on article pages -->
   {{ if eq .Kind "page" }}
-  <script src="https://cdn.jsdelivr.net/npm/twemoji@14.1.2/dist/twemoji.min.js" crossorigin="anonymous" defer></script>
+  <script src="https://cdn.jsdelivr.net/npm/twemoji@14.1.2/dist/twemoji.min.js" integrity="sha384-ws2weVvlLu+TpdEqhKEpn5zF3I5w4UgPzl43Rx6weg3rOegMzGBd0S7sXwse8oAC" crossorigin="anonymous" defer></script>
   {{ $twemojiScript := resources.Get "js/twemoji-init.js" | minify }}
   <script src="{{ $twemojiScript.RelPermalink }}" defer></script>
   {{ end }}
-- 
cgit v1.2.3