Enabler to make scripts loaded from CDN more secure (#1127)

* added integrity property to load scripts * fix contribution
silverbulletmd · Oct 25, 2024 · e83f3eb · e83f3eb
1 parent 8acb112
commit e83f3eb
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/web/components/panel_html.ts b/web/components/panel_html.ts
@@ -90,9 +90,14 @@ function updateHeight() {
   }
 }
 
-function loadJsByUrl(url) {
+function loadJsByUrl(url,integrity=null) {
   const script = document.createElement("script");
   script.src = url;
+  if(integrity){
+    script.integrity=integrity;
+    script.crossorigin="anonymous";
+  }
+  
 
   return new Promise((resolve) => {
     script.onload = resolve;
@@ -104,4 +109,4 @@ function loadJsByUrl(url) {
 <body>
 
 </body>
-</html>`;
+</html>`;