Merge pull request #539 from typelevel/privacy-improvements

Privacy improvements

Author: rossabaker

_includes/_head.html

@@ -4,13 +4,14 @@
   <title>{{ site.name }} | {% if page.path contains '_event' %}{{ page.short_title }}{% else %}{{ page.title }}{% endif %}</title>
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <meta name="description" content="{{ site.description }}">
-
+  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' cdnjs.cloudflare.com 'unsafe-inline'; style-src 'self' cdnjs.cloudflare.com 'unsafe-inline'; font-src fonts.gstatic.com cdnjs.cloudflare.com; img-src 'self' img.shields.io; frame-src www.google.com; upgrade-insecure-requests">
+  <meta name="referrer" content="no-referrer">
 
   <link rel="mask-icon" href="/img/favicon-safari.svg" color="#F51C2B">
   <link href="/img/favicon.png" rel="icon" type="image/x-icon">
 
   <!-- Custom CSS -->
-  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/styles/monokai.min.css">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/styles/monokai.min.css" crossorigin="anonymous" integrity="sha384-88Jvj9Q2LiBDwL7w3yciRTcH5q2zzvMFYIm4xX9/evqxJsxA33Xk9XYKcvUlPITo">
   <link rel="stylesheet" href="{{ '/css/main.css' | relative_url }}">
 
   <link rel="alternate" type="application/rss+xml" title="Blog articles" href="{% link blog/feed.rss %}" />
@@ -24,7 +25,7 @@
     };
   </script>
   <script type="text/javascript" id="MathJax-script" async
-    src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js">
+    src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/tex-mml-chtml.js" crossorigin="anonymous" integrity="sha384-Wuix6BuhrWbjDBs24bXrjf4ZQ5aFeFWBuKkFekO2t8xFU0iNaLQfp2K6/1Nxveei">
   </script>
   {% endif %}
 </head>

_includes/_js-bottom.html

@@ -1,5 +1,5 @@
 <script type="text/javascript" src="{{ '/js/functions.js' | relative_url }}"></script>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/highlight.min.js"></script>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/languages/scala.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/highlight.min.js" crossorigin="anonymous" integrity="sha384-zDX/4RkDnpVxZkjJjxdzDsT1Kk2XThh7u47fXdgZ1W8AMjb//F4ZK4G4y7oNVHM1"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.3.1/languages/scala.min.js" crossorigin="anonymous" integrity="sha384-3GmPRxZT/qivuIKFrF0btQk8Z2jeNUlpWOyZBiRlf1Yi2CD+EWISY5mi+2yflNz4"></script>
 <script>hljs.highlightAll();</script>
-<script src="https://kit.fontawesome.com/a7055d991d.js" crossorigin="anonymous"></script>
+<script src="https://kit.fontawesome.com/a7055d991d.js" crossorigin="anonymous" integrity="sha384-X3bthPf99rHsI5P+JvfCFDjJ25zSlFjBMRD9IKXGGUN2/dXFn9HXcpAwU8141qKG></script>