From 87f3854256583a9a6a37d6dd8a365220f039983f Mon Sep 17 00:00:00 2001 From: DannyAAM Date: Fri, 11 Jul 2025 22:07:35 +0800 Subject: [PATCH] improve script security --- index.html | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/index.html b/index.html index 533f983..1b86fab 100644 --- a/index.html +++ b/index.html @@ -73,8 +73,10 @@ } else { return new Promise((resolve, reject) => { const script = document.createElement("script"); - script.setAttribute("src", "https://cdn.jsdelivr.net/npm/js-sha256@0.11.0/src/sha256.min.js"); + script.setAttribute("src", "https://cdn.jsdelivr.net/npm/js-sha256@0.11.1/src/sha256.min.js"); script.setAttribute("type", "text/javascript"); + script.setAttribute("integrity", "sha384-770qA4HuffiCn2yxSxNLbMwOo4ASxYoGkCSKWiTJy8df4UKbkJ3fAtnE+iTegBWn"); + script.setAttribute("crossorigin", "anonymous"); script.setAttribute("async", "async"); script.addEventListener("load", async () => { resolve(await _sha256(bytes)); @@ -159,6 +161,8 @@ const script = document.createElement("script"); script.setAttribute("src", "https://cdn.jsdelivr.net/npm/clipboard@2.0.11/dist/clipboard.min.js"); script.setAttribute("type", "text/javascript"); + script.setAttribute("integrity", "sha384-J08i8An/QeARD9ExYpvphB8BsyOj3Gh2TSh1aLINKO3L0cMSH2dN3E22zFoXEi0Q"); + script.setAttribute("crossorigin", "anonymous"); script.setAttribute("async", "async"); script.addEventListener("load", () => { const clipboard = new ClipboardJS(ckeyCopyDom);