From f6d5fe51b12d30cf9d2bdcb700a2043351e079be Mon Sep 17 00:00:00 2001
From: Robert Long <robert@robertlong.me>
Date: Wed, 2 May 2018 17:10:21 -0700
Subject: [PATCH] Add SRI hash and crossorigin attribute to script tags
---
src/avatar-selector.html | 4 ++--
src/hub.html | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/avatar-selector.html b/src/avatar-selector.html
index 531a7e15f..f69072c1a 100644
--- a/src/avatar-selector.html
+++ b/src/avatar-selector.html
@@ -6,9 +6,9 @@
<title>avatar selector</title>
<link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
<% if(NODE_ENV === "production") { %>
- <script src="https://cdn.rawgit.com/brianpeiris/aframe/845825ae694449524c185c44a314d361eead4680/dist/aframe-master.min.js"></script>
+ <script src="https://cdn.rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.min.js" integrity="sha384-cKjxF5vmHB6Jq8O24NlFfpIzDNKSapSmpIKyg6KzGAsliOfbCAJHxE/EZHzw9xU0" crossorigin="anonymous"></script>
<% } else { %>
- <script src="https://cdn.rawgit.com/brianpeiris/aframe/845825ae694449524c185c44a314d361eead4680/dist/aframe-master.js"></script>
+ <script src="https://cdn.rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.js" integrity="sha384-lDPOpFIESh74q9UjPSiOy6dIBuvtUzKzBzV9UTvIDW+9eiL3PjlMRBJuTWq8se7Y" crossorigin="anonymous"></script>
<% } %>
</head>
diff --git a/src/hub.html b/src/hub.html
index e8fd32cf3..c825498ad 100644
--- a/src/hub.html
+++ b/src/hub.html
@@ -13,9 +13,9 @@
<link href="https://fonts.googleapis.com/css?family=Zilla+Slab:300,300i,400,400i,700" rel="stylesheet">
<% if(NODE_ENV === "production") { %>
- <script src="https://rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.min.js"></script>
+ <script src="https://cdn.rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.min.js" integrity="sha384-cKjxF5vmHB6Jq8O24NlFfpIzDNKSapSmpIKyg6KzGAsliOfbCAJHxE/EZHzw9xU0" crossorigin="anonymous"></script>
<% } else { %>
- <script src="https://rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.js"></script>
+ <script src="https://cdn.rawgit.com/aframevr/aframe/dba7369/dist/aframe-master.js" integrity="sha384-lDPOpFIESh74q9UjPSiOy6dIBuvtUzKzBzV9UTvIDW+9eiL3PjlMRBJuTWq8se7Y" crossorigin="anonymous"></script>
<% } %>
</head>
--
GitLab