|
19 | 19 | We could remove the 'unsafe-inline' by externalizing
|
20 | 20 | the JavaScript and the end of the page.
|
21 | 21 | {% endcomment %}
|
22 |
| - script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net {%if site.url == "http://localhost:4000" %}'unsafe-eval'{%endif%}; |
23 |
| - style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; |
| 22 | + script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com {%if site.url == "http://localhost:4000" %}'unsafe-eval'{%endif%}; |
| 23 | + style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; |
24 | 24 | {%comment%}
|
25 | 25 | This is a nice to have but requires changes in
|
26 | 26 | libraries we use. We can periodically enable this
|
|
61 | 61 | <link rel="stylesheet" href="{{ "/assets/css/style.css" | relative_url }}" type="text/css" media="screen">
|
62 | 62 | <link rel="preconnect" href="https://{{ layout.algolia.appId }}-dsn.algolia.net" crossorigin>
|
63 | 63 | {% if site.url == "http://localhost:4000" -%}
|
64 |
| - <script src="https://cdn.jsdelivr.net/npm/@khanacademy/tota11y/dist/tota11y.min.js" crossorigin="anonymous" async></script> |
| 64 | + <script src="https://cdnjs.cloudflare.com/ajax/libs/tota11y/0.1.6/tota11y.min.js" crossorigin="anonymous" async></script> |
65 | 65 | {% endif -%}
|
66 | 66 | {% if site.data.locales and page.lang -%}
|
67 | 67 | {% assign locales = site.data.locales | sort -%}
|
|
75 | 75 | {% endif -%}
|
76 | 76 | {% endfor -%}
|
77 | 77 | {% endif -%}
|
78 |
| - <link rel="preload" href="https://cdn.jsdelivr.net/npm/@docsearch/css@3/dist/style.min.css" as="style" media="screen" onload="this.onload=null;this.rel='stylesheet'"> |
| 78 | + <link rel="preload" href="https://cdnjs.cloudflare.com/ajax/libs/docsearch-css/3.9.0/style.min.css" integrity="sha512-sIgq4M6w/5zPkFzkEpaTuKtZnko/4fsTWj/4XcsVLfpj5q68YkybfOxxLidjo5yZ16dsidABSz4RaapCvzbntQ==" crossorigin="anonymous" referrerpolicy="no-referrer" as="style" media="screen" onload="this.onload=null;this.rel='stylesheet'"> |
79 | 79 | {% if page.url == "/" -%}
|
80 | 80 | {% for rel_me_url in site.link_rel_me_urls -%}
|
81 | 81 | <link href="{{rel_me_url}}" rel="me">
|
@@ -216,12 +216,16 @@ <h1><a href="{{ site.baseurl }}/">{{ site.title }}</a></h1>
|
216 | 216 | setupCopyables();
|
217 | 217 | });
|
218 | 218 | </script>
|
219 |
| - <script src="https://cdn.jsdelivr.net/npm/anchor-js@5.0.0/anchor.min.js" |
220 |
| - integrity="sha256-aQmOEF2ZD4NM/xt4hthzREIo/2PFkOX/g01WjxEV7Ys=" |
221 |
| - crossorigin="anonymous" |
| 219 | + <script src="https://cdnjs.cloudflare.com/ajax/libs/anchor-js/5.0.0/anchor.min.js" |
| 220 | + integrity="sha512-byAcNWVEzFfu+tZItctr+WIMUJvpzT2kokkqcBq+VsrM3OrC5Aj9E2gh+hHpU0XNA3wDmX4sDbV5/nkhvTrj4w==" |
| 221 | + crossorigin="anonymous" |
| 222 | + referrerpolicy="no-referrer" |
222 | 223 | onload="loadAnchors()"
|
223 | 224 | async></script>
|
224 |
| - <script src="https://cdn.jsdelivr.net/npm/@docsearch/js@3/dist/umd/index.min.js" |
| 225 | + <script src="https://cdnjs.cloudflare.com/ajax/libs/docsearch-js/3.8.3/umd/index.min.js" |
| 226 | + integrity="sha512-KimAzbZkqq4d6R95a3Fo124FpsXtPq2UH9xOI+IT931aUPiEqRak8jYT7VnpYP/7dkk33vzi1YhDzH+8T6qOrw==" |
| 227 | + crossorigin="anonymous" |
| 228 | + referrerpolicy="no-referrer" |
225 | 229 | onload="loadSearch('{{ page.lang }}', '{{ page.search_site }}')"
|
226 | 230 | async></script>
|
227 | 231 | </body>
|
|
0 commit comments