Add subresource integrity to tracking script

citizenalpha-project · Jun 5, 2024 · b0c65f4 · b0c65f4
1 parent 824d92f
commit b0c65f4
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/themes/v1/layouts/partials/head.html b/themes/v1/layouts/partials/head.html
@@ -19,7 +19,13 @@
 <!-- {{ partialCached "head/js.html" . }} -->
 
 {{ if hugo.IsProduction }}
-    <script async src="https://offen.citizenalpha.de/script.js"
+    {{ $src := "https://offen.citizenalpha.de/script.js" }}
+    <script
+        async
+        src="{{ $src }}"
+        integrity="sha256-{{ resources.GetRemote $src | crypto.SHA256 }}"
+        crossorigin="anonymous"
+
         data-account-id="d5573aed-d858-4371-b256-b4c1e9a9b450"
         data-locale="de"
     ></script>