Add resource integrity check to script element

Related: CWE-830
Seravo · Sep 3, 2024 · 9d1d074 · 9d1d074
1 parent 21c82d6
commit 9d1d074
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/_includes/head.html b/_includes/head.html
@@ -40,7 +40,7 @@
     {% if site.google_analytics_id %}
     {% include google_analytics.html %}
     {% endif%}
-    <script src="https://code.jquery.com/jquery-2.1.4.min.js" type="text/javascript"></script>
+    <script src="https://code.jquery.com/jquery-2.1.4.min.js" integrity="sha384-R4/ztc4ZlRqWjqIuvf6RX5yb/v90qNGx6fS48N0tRxiGkqveZETq72KgDVJCp2TC" type="text/javascript"></script>
     <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css" rel="stylesheet">
     <link rel="stylesheet" href="{{ site.baseurl }}/assets/main.css">
     <link href='https://fonts.googleapis.com/css?family=Ubuntu' rel='stylesheet' type='text/css'>