Use integrity for scripts hosted on the CDN

mei23 · Mar 13, 2021 · 224138a · 224138a
1 parent bf4cd9b
commit 224138a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/client/assets/redoc.html b/src/client/assets/redoc.html
@@ -19,6 +19,6 @@
 	</head>
 	<body>
 		<redoc spec-url='/api.json'></redoc>
-		<script src="https://cdn.jsdelivr.net/npm/redoc@next/bundles/redoc.standalone.js"> </script>
+		<script src="https://cdn.jsdelivr.net/npm/redoc@2.0.0-rc.48/bundles/redoc.standalone.js" integrity="sha256-FI07Zo3zrSdvkLx95toZ5sXGQKn9BsM2MulFYpo+Pno=" crossorigin="anonymous"></script>
 	</body>
 </html>
diff --git a/src/server/web/views/docs-base.pug b/src/server/web/views/docs-base.pug
@@ -7,8 +7,8 @@ html(lang= lang)
 		title
 			| #{title} | Misskey Docs
 		link(rel="stylesheet" href="/docs/assets/style.css")
-		link(rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/10.1.2/styles/github.min.css")
-		script(src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/10.1.2/highlight.min.js")
+		link(rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/10.6.0/styles/github.min.css" integrity="sha512-7QTQ5Qsc/IL1k8UU2bkNFjpKTfwnvGuPYE6fzm6yeneWTEGiA3zspgjcTsSgln9m0cn3MgyE7EnDNkF1bB/uCw==" crossorigin="anonymous")
+		script(src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/10.6.0/highlight.min.js" integrity="sha512-zol3kFQ5tnYhL7PzGt0LnllHHVWRGt2bTCIywDiScVvLIlaDOVJ6sPdJTVi0m3rA660RT+yZxkkRzMbb1L8Zkw==" crossorigin="anonymous")
 		block meta
 
 	body