Add script's integrity and crossorigin attributes

[JulienTant]

When using <script> to pull a library from a CDN, it's usually a good idea to attach an integrity check so that if they get hacked and someone changes all the script, malicious scripts don't get executed on your website.

To achieve this, you need to attach integrity and crossorigin to your <script/> tag

Script(
	Scr("https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta1/dist/js/bootstrap.bundle.min.js"),
	Integrity("sha384-ygbV9kiqUc6oa4msXn9868pTtWMgiQaeYH7/t7LECLbyPA2x65Kgf80OJFdroafW"),
	CrossOrigin("anonymous"),
)

Turns into

<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta1/dist/js/bootstrap.bundle.min.js" 
    integrity="sha384-ygbV9kiqUc6oa4msXn9868pTtWMgiQaeYH7/t7LECLbyPA2x65Kgf80OJFdroafW" 
    crossorigin="anonymous"></script>

Hint for whoever likes unpkg.com, adding ?meta at the end of any script you import form them will give you the current integrity for the file. Example: https://unpkg.com/three@0.165.0/build/three.cjs?meta

[markuswustenberg]

Thank you for that! 😊