add SRI to summernote CDN

leolivier · Jan 19, 2025 · dd730e8 · dd730e8
1 parent 3957377
commit dd730e8
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/cm_main/templates/cm_main/common/include-summernote.html b/cm_main/templates/cm_main/common/include-summernote.html
@@ -1,7 +1,13 @@
 {% load static i18n cm_tags %}
 <!-- include summernote lite css/js -->
-<link href="https://cdn.jsdelivr.net/npm/summernote@0.8.18/dist/summernote-lite.min.css" rel="stylesheet">
-<script src="https://cdn.jsdelivr.net/npm/summernote@0.8.18/dist/summernote-lite.min.js"></script>
+<link rel="stylesheet"
+      href="https://cdn.jsdelivr.net/npm/summernote@0.8.18/dist/summernote-lite.min.css"
+      integrity="sha384-ymgpfvYiIE34y8f8FHcVzcMbjc71SGbtoAl9+ku7kaYjEVbxgF2CvkrwYeGywqyd"
+      crossorigin="anonymous">
+<script src="https://cdn.jsdelivr.net/npm/summernote@0.8.18/dist/summernote-lite.min.js"
+	integrity="sha384-llmpdW/XN7NR6OnZQFvy2xN3KRv+Br5lpV3IEJYCJITjcjlfdSdxb0R3hAhfPsGq"
+	crossorigin="anonymous"></script>
+{# can't add SRI to this one as it is dynamic #}
 <script src="https://cdn.jsdelivr.net/npm/summernote@0.8.18/dist/lang/summernote-{%normalized_language_code%}.min.js"></script>
 {%trans "Toggle Note Editor Toolbar" as trtoggle%}
 {%trans "Remaining characters:" as trchar%}