From 58b2d1dda9bb1ace6ff97e0b43ef2f31af22f808 Mon Sep 17 00:00:00 2001
From: Claudio Yanes <me@claudio4.com>
Date: Fri, 4 Mar 2022 03:34:45 +0000
Subject: [PATCH] Add attribute property to scripts from jsdelivr

Adding the integrity attribute protects the website (by refusing to load
the script) against malicious modifications of the script
in the case of jsdelivr gets hacked
---
 layouts/partials/graph.html  | 2 +-
 layouts/partials/search.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/layouts/partials/graph.html b/layouts/partials/graph.html
index 31d008cd..ca379689 100644
--- a/layouts/partials/graph.html
+++ b/layouts/partials/graph.html
@@ -1,4 +1,4 @@
-<script src="https://cdn.jsdelivr.net/npm/d3@6"></script>
+<script src="https://cdn.jsdelivr.net/npm/d3@6.7.0/dist/d3.min.js" integrity="sha256-+7jaYCp29O1JusNWHaYtgUn6EhuP0VaFuswhNV06MyI=" crossorigin="anonymous"></script>
 <h3>Interactive Graph</h3>
 <div id="graph-container"></div>
 <style>
diff --git a/layouts/partials/search.html b/layouts/partials/search.html
index 7bc7ed0c..f727184a 100644
--- a/layouts/partials/search.html
+++ b/layouts/partials/search.html
@@ -5,6 +5,6 @@
         </div>
     </div>
 </div>
-<script defer src="https://cdn.jsdelivr.net/gh/nextapps-de/flexsearch@0.7.2/dist/flexsearch.bundle.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/flexsearch@0.7.21/dist/flexsearch.bundle.js" integrity="sha256-i3A0NZGkhsKjVMzFxv3ksk0DZh3aXqu0l49Bbh0MdjE=" crossorigin="anonymous" defer></script>
 {{ $js := resources.Get "js/search.js" |  resources.Fingerprint "md5" | resources.Minify }}
 <script defer src="{{ $js.Permalink }}"></script>