From 1dc874bf5e074a1dc7bbea2402e2ad4eaac79014 Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 08:44:35 +0300 Subject: [PATCH 1/6] download: Reword CDN paragraph --- site/content/docs/5.3/getting-started/download.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site/content/docs/5.3/getting-started/download.md b/site/content/docs/5.3/getting-started/download.md index 9c20c6bb2296..a72502c5a2a8 100644 --- a/site/content/docs/5.3/getting-started/download.md +++ b/site/content/docs/5.3/getting-started/download.md @@ -54,7 +54,7 @@ If you're using our compiled JavaScript and prefer to include Popper separately, We recommend [jsDelivr](https://www.jsdelivr.com/) and use it ourselves in our documentation. However, in some cases—like in some specific countries or environments—you may need to use other CDN providers like [cdnjs](https://cdnjs.com/) or [unpkg](https://unpkg.com/). -You'll find the same files on these CDN providers, albeit with different URLs. When changing the URLs, you'll also need to update the `integrity` attribute. Tools like [SRI Hash Generator](https://www.srihash.org/) can help you generate the correct values. +You'll find the same files on these CDN providers, albeit with different URLs. With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. From 7b30f4b9234e426e33f2ac76ad3d9d9fb18b1f99 Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 08:46:53 +0300 Subject: [PATCH 2/6] Update download.md --- site/content/docs/5.3/getting-started/download.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site/content/docs/5.3/getting-started/download.md b/site/content/docs/5.3/getting-started/download.md index a72502c5a2a8..0b932fe33546 100644 --- a/site/content/docs/5.3/getting-started/download.md +++ b/site/content/docs/5.3/getting-started/download.md @@ -54,7 +54,7 @@ If you're using our compiled JavaScript and prefer to include Popper separately, We recommend [jsDelivr](https://www.jsdelivr.com/) and use it ourselves in our documentation. However, in some cases—like in some specific countries or environments—you may need to use other CDN providers like [cdnjs](https://cdnjs.com/) or [unpkg](https://unpkg.com/). -You'll find the same files on these CDN providers, albeit with different URLs. +You'll find the same files on these CDN providers, albeit with different URLs. **If the SRI hashes differ, you shouldn't use the files from that CDN, because it means that the file was modified by someone.** With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. From 4015cc104599cc6bb49a2e5502ff6e5df1691cdc Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 08:49:40 +0300 Subject: [PATCH 3/6] Update download.md --- site/content/docs/5.3/getting-started/download.md | 1 + 1 file changed, 1 insertion(+) diff --git a/site/content/docs/5.3/getting-started/download.md b/site/content/docs/5.3/getting-started/download.md index 0b932fe33546..37311216e558 100644 --- a/site/content/docs/5.3/getting-started/download.md +++ b/site/content/docs/5.3/getting-started/download.md @@ -55,6 +55,7 @@ If you're using our compiled JavaScript and prefer to include Popper separately, We recommend [jsDelivr](https://www.jsdelivr.com/) and use it ourselves in our documentation. However, in some cases—like in some specific countries or environments—you may need to use other CDN providers like [cdnjs](https://cdnjs.com/) or [unpkg](https://unpkg.com/). You'll find the same files on these CDN providers, albeit with different URLs. **If the SRI hashes differ, you shouldn't use the files from that CDN, because it means that the file was modified by someone.** +Note that you should compare same length hashes, e.g. sha-384 with sha-384, otherwise it's expected for them to be different. As such, you can use [SRI Hash Generator](https://www.srihash.org/) to make sure the hashes are the same for a given file. With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. From 9624ee3d303a1f11d3c01af4925ad40e286bb450 Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 09:00:57 +0300 Subject: [PATCH 4/6] Update download.md --- site/content/docs/5.3/getting-started/download.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/site/content/docs/5.3/getting-started/download.md b/site/content/docs/5.3/getting-started/download.md index 37311216e558..7b6b79af5e26 100644 --- a/site/content/docs/5.3/getting-started/download.md +++ b/site/content/docs/5.3/getting-started/download.md @@ -54,10 +54,14 @@ If you're using our compiled JavaScript and prefer to include Popper separately, We recommend [jsDelivr](https://www.jsdelivr.com/) and use it ourselves in our documentation. However, in some cases—like in some specific countries or environments—you may need to use other CDN providers like [cdnjs](https://cdnjs.com/) or [unpkg](https://unpkg.com/). +With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. + You'll find the same files on these CDN providers, albeit with different URLs. **If the SRI hashes differ, you shouldn't use the files from that CDN, because it means that the file was modified by someone.** -Note that you should compare same length hashes, e.g. sha-384 with sha-384, otherwise it's expected for them to be different. As such, you can use [SRI Hash Generator](https://www.srihash.org/) to make sure the hashes are the same for a given file. +Note that you should compare same length hashes, e.g. sha-384 with sha-384, otherwise it's expected for them to be different. As such, you can use [SRI Hash Generator](https://www.srihash.org/) to make sure the hashes are the same for a given file. Alternatively, you can achieve the same from the CLI assuming you have OpenSSL installed, for example: -With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. +```sh +openssl dgst -sha384 -binary bootstrap.min.js | openssl base64 -A +``` ## Package managers From 73c98ab070dd192793ed51985e88b939301af69c Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 09:02:11 +0300 Subject: [PATCH 5/6] Update .cspell.json --- .cspell.json | 1 + 1 file changed, 1 insertion(+) diff --git a/.cspell.json b/.cspell.json index e477ef83d393..484af2af58d7 100644 --- a/.cspell.json +++ b/.cspell.json @@ -40,6 +40,7 @@ "dropright", "dropstart", "dropup", + "dgst", "errorf", "favicon", "favicons", From a8236e9d96207a17d49abc608e0eea3205d6c200 Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Thu, 14 Sep 2023 09:02:59 +0300 Subject: [PATCH 6/6] Update download.md --- site/content/docs/5.3/getting-started/download.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site/content/docs/5.3/getting-started/download.md b/site/content/docs/5.3/getting-started/download.md index 7b6b79af5e26..39e0d866c60b 100644 --- a/site/content/docs/5.3/getting-started/download.md +++ b/site/content/docs/5.3/getting-started/download.md @@ -57,7 +57,7 @@ We recommend [jsDelivr](https://www.jsdelivr.com/) and use it ourselves in our d With cdnjs, you can [use this direct Bootstrap package link](https://cdnjs.com/libraries/bootstrap) to copy and paste ready-to-use HTML snippets for each dist file from any version of Bootstrap. You'll find the same files on these CDN providers, albeit with different URLs. **If the SRI hashes differ, you shouldn't use the files from that CDN, because it means that the file was modified by someone.** -Note that you should compare same length hashes, e.g. sha-384 with sha-384, otherwise it's expected for them to be different. As such, you can use [SRI Hash Generator](https://www.srihash.org/) to make sure the hashes are the same for a given file. Alternatively, you can achieve the same from the CLI assuming you have OpenSSL installed, for example: +Note that you should compare same length hashes, e.g. sha384 with sha384, otherwise it's expected for them to be different. As such, you can use [SRI Hash Generator](https://www.srihash.org/) to make sure the hashes are the same for a given file. Alternatively, you can achieve the same from the CLI assuming you have OpenSSL installed, for example: ```sh openssl dgst -sha384 -binary bootstrap.min.js | openssl base64 -A