Added integrity check to mermaid.js

cjang2 · Jan 27, 2024 · 3ec0ff4 · 3ec0ff4
1 parent a7d6b37
commit 3ec0ff4
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/_includes/scripts/mermaid.liquid b/_includes/scripts/mermaid.liquid
@@ -1,5 +1,9 @@
 {% if page.mermaid and page.mermaid.enabled %}
-  <script src="https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.min.js"></script>
+  <script
+    src="https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.min.js"
+    integrity="sha256-TtLOdUA8mstPoO6sGvHIGx2ceXrrX4KgIItO06XOn8A="
+    crossorigin="anonymous"
+  ></script>
   {% if page.mermaid.zoomable %}
     <script src="https://d3js.org/d3.v7.min.js"></script>
   {% endif %}