Add SRI to CDN links and scripts

Since highlightjs automatically generates the corresponding cdn resources through configuration, it is not possible to add SRI for now

7 files changed, 9 insertions, 14 deletions

diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html
index d5a71ee..ed1978b 100644
--- a/layouts/_default/baseof.html
+++ b/layouts/_default/baseof.html
@@ -46,8 +46,8 @@
       </div>
     </div>
 
-    <script src="https://cdn.jsdelivr.net/npm/jquery@3.6.0"></script>
-    <script src="https://cdn.jsdelivr.net/npm/semantic-ui@2.4.2/dist/semantic.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/jquery@3.6.0" integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/semantic-ui@2.4.2/dist/semantic.min.js" integrity="sha256-CgSoWC9w5wNmI1aN8dIMK+6DPelUEtvDr+Bc2m/0Nx8=" crossorigin="anonymous"></script>
 
     {{ if .Site.Params.enableSearch }}
     {{ partial "search.html" . }}
diff --git a/layouts/_default/list.html b/layouts/_default/list.html
index 3a07e9a..e0d5df7 100644
--- a/layouts/_default/list.html
+++ b/layouts/_default/list.html
@@ -27,8 +27,6 @@
 {{ define "js" }}
 
 {{ if .Site.Params.Experimental.jsDate }}
-<script src="https://cdn.jsdelivr.net/npm/luxon@1.26.0"></script>
-
 {{ partial "luxon.html" . }}
 {{ end }}
 
diff --git a/layouts/_default/single.html b/layouts/_default/single.html
index 0e750a9..a866ee6 100644
--- a/layouts/_default/single.html
+++ b/layouts/_default/single.html
@@ -148,8 +148,6 @@
 {{ define "js" }}
 
 {{ if .Site.Params.Experimental.jsDate }}
-<script src="https://cdn.jsdelivr.net/npm/luxon@1.26.0"></script>
-
 {{ partial "luxon.html" . }}
 {{ end }}
 
@@ -167,6 +165,6 @@
 {{ partial "highlight.html" . }}
 {{ end }}
 
-<script src="https://cdn.jsdelivr.net/npm/html2canvas@1.0.0-rc.1"></script>
+<script src="https://cdn.jsdelivr.net/npm/html2canvas@1.0.0-rc.1/dist/html2canvas.min.js" integrity="sha256-uacRffSSMP9qpvNWhVmYLykBv9YKMA1d/VSIN1AmfyQ=" crossorigin="anonymous"></script>
 <script src="{{ "/js/post.js" | relURL }}" defer></script>
 {{ end }}
diff --git a/layouts/index.html b/layouts/index.html
index df35424..a238b6b 100644
--- a/layouts/index.html
+++ b/layouts/index.html
@@ -19,12 +19,10 @@
 {{ define "js" }}
 
 {{ if .Site.Params.Experimental.jsDate }}
-<script src="https://cdn.jsdelivr.net/npm/luxon@1.26.0"></script>
-
 {{ partial "luxon.html" . }}
 {{ end }}
 
-<script src="https://cdn.jsdelivr.net/npm/imagesloaded@4.1.4/imagesloaded.pkgd.min.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/masonry-layout@4.2.2/dist/masonry.pkgd.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/imagesloaded@4.1.4/imagesloaded.pkgd.js" integrity="sha256-ZtjBh+3lqbfJ5UfahD26E9Rns4w4UyNqMpPVZ+LTT/g=" crossorigin="anonymous"></script>
+<script src="https://cdn.jsdelivr.net/npm/masonry-layout@4.2.2/dist/masonry.pkgd.min.js" integrity="sha256-Nn1q/fx0H7SNLZMQ5Hw5JLaTRZp0yILA/FRexe19VdI=" crossorigin="anonymous"></script>
 <script src="{{ "/js/grid.js" | relURL }}"></script>
 {{ end }}
diff --git a/layouts/partials/footer.html b/layouts/partials/footer.html
index 36bda14..1e93fda 100644
--- a/layouts/partials/footer.html
+++ b/layouts/partials/footer.html
@@ -29,7 +29,7 @@
     })(document, 'script', 'twitter-wjs')
   }
 </script>
-<script src="https://cdn.jsdelivr.net/npm/overlayscrollbars@1.13.1/js/jquery.overlayScrollbars.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/overlayscrollbars@1.13.1/js/jquery.overlayScrollbars.min.js" integrity="sha256-tBd38uWlvgfps3zHPrUb2ePBg+Z8EjMf0QloFONzpvU=" crossorigin="anonymous"></script>
 <script src="{{ "/js/header.js" | relURL }}"></script>
 <script src="{{ "/js/main.js" | relURL }}"></script>
 <script src="{{ "/js/theme.js" | relURL }}"></script>
diff --git a/layouts/partials/head.html b/layouts/partials/head.html
index 00289c6..0082963 100644
--- a/layouts/partials/head.html
+++ b/layouts/partials/head.html
@@ -23,9 +23,9 @@
 <!-- Twitter Cards -->
 {{ template "_internal/twitter_cards.html" . }}
 
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/semantic-ui@2.4.2/dist/semantic.min.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/semantic-ui@2.4.2/dist/semantic.min.css" integrity="sha256-UXesixbeLkB/UYxVTzuj/gg3+LMzgwAmg3zD+C4ZASQ=" crossorigin="anonymous">
 <link rel="stylesheet" href="{{ "/css/icomoon.css" | relURL }}" />
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/overlayscrollbars@1.13.1/css/OverlayScrollbars.min.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/overlayscrollbars@1.13.1/css/OverlayScrollbars.min.css" integrity="sha256-WKijf8KI68sbq8Znd6yMepIuFF0wdWfIt6gk3JWcQfk=" crossorigin="anonymous">
 <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/github-markdown-css@4.0.0/github-markdown.min.css">
 <link rel="stylesheet" href="{{ "/css/site.css" | relURL }}" />
 
diff --git a/layouts/partials/luxon.html b/layouts/partials/luxon.html
index 1f34fec..8dcd51f 100644
--- a/layouts/partials/luxon.html
+++ b/layouts/partials/luxon.html
@@ -1,3 +1,4 @@
+<script src="https://cdn.jsdelivr.net/npm/luxon@1.26.0" integrity="sha256-4sbTzmCCW9LGrIh5OsN8V5Pfdad1F1MwhLAOyXKnsE0=" crossorigin="anonymous"></script>
 <script>
   format()