Merge pull request #365 from ppfeufer/integrity-hashes

CHANGELOG.md

@@ -38,6 +38,7 @@ Section Order:
 ### Added
 
 - Optional doctrine field to FAT link creation forms
+- Integrity hashes to CSS and JavaScript
 
 ## \[3.3.0\] - 2024-11-06
 

afat/templates/afat/bundles/afat-css.html

@@ -1,3 +1,8 @@
 {% load afat %}
 
-<link rel="stylesheet" href="{% afat_static 'afat/css/afat.min.css' %}">
+<link
+    rel="stylesheet"
+    href="{% afat_static 'afat/css/afat.min.css' %}"
+    integrity="sha512-fFbU9+kshMRsPpHxK5YlGOMUFVh/o9OjKBlKbJw5PBzMYj4qH0GsL1AqaH3TfvgPig7cMHEUAa6LTXRINHF9CQ=="
+    crossorigin="anonymous"
+>

afat/templates/afat/bundles/afat-dashboard-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat-dashboard.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat-dashboard.min.js' %}"
+    integrity="sha512-Dvc5wFexjA8qBLmxyc87/dXVdIyjs4piXunHHpJ77Z6Wh6OQBygo4Z5RiS+Dc2Vac/AphLp9h/oFOKtHzjx4gw=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-fatlink-add-js.html

@@ -1,3 +1,8 @@
 {% load afat %}
 
-<script type="module" src="{% afat_static 'afat/javascript/afat-fatlink-add.min.js' %}"></script>
+<script
+    type="module"
+    src="{% afat_static 'afat/javascript/afat-fatlink-add.min.js' %}"
+    integrity="sha512-CtsCwKfzxZQq3XRsXS2q0ARjhri2hkfxnzenjedEaSPx0SkyzuJIQB3ZQz7h0JfM75dIC2zS+9WUrGw0yCmeTA=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-fatlink-details-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat-fatlink-details.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat-fatlink-details.min.js' %}"
+    integrity="sha512-qHpd4uyLu4fw9dNcR4tSVawUU2YtrnB9MwE0AbXuqjYuP+Qgm0N3ZGWFNM7Vf6A1zDf4bTcLKcndsTglhc5KrQ=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-fatlist-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat-fatlist.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat-fatlist.min.js' %}"
+    integrity="sha512-0g9M0p3VXnJncYK7PSVyNJNzo+Obrje1SSfTVuDm1Wj60LISgNaSW71SZuM5eVdGpr5MZuFZR3wH8L6izsdvzg=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat.min.js' %}"
+    integrity="sha512-C2W8M+eJm/HsHseNtLCJ/kbGHJpyBJxm+tGy6AzZxI04WjfKfm6vHnDkOeYfjhgT9+1oabQGRvTz4SX2SkLMHQ=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-logs-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat-logs.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat-logs.min.js' %}"
+    integrity="sha512-EbxdJu+l2geNWA0+tOUujotEfWUnnlSrbjMVpxpOXrRP1HwujLAlyyIQgDw2smurCKWh+lpgS6+f2FxmVO8qFw=="
+    crossorigin="anonymous"
+></script>

afat/templates/afat/bundles/afat-statistics-js.html

@@ -1,3 +1,7 @@
 {% load afat %}
 
-<script src="{% afat_static 'afat/javascript/afat-statistics.min.js' %}"></script>
+<script
+    src="{% afat_static 'afat/javascript/afat-statistics.min.js' %}"
+    integrity="sha512-3lOwv/H+HlAspcYVOfUIqF5ovqnQqMh4ACWmj3Z4aXnmyK6iJNMYqbf41gjT8b5CwXAl+eCOgKGt1BoS9BH0+Q=="
+    crossorigin="anonymous"
+></script>