add checksum for downloaded JS files (#442)

simonLeary42 · web-flow · commit a80ebd9dbf96 · 2025-12-23T08:41:22.000-05:00
diff --git a/README.md b/README.md
@@ -24,7 +24,7 @@ Admin Features:
 - Automatic updating of LDAP to reflect current state of users, groups, organizations, PI groups
 - Cluster notices
   - Added to front page, mailed, and exposed via REST API
-- WYSIWYG HTML editor for webpage contents, cluster notices
+- WYSIWYG HTML editor ([ckeditor5](https://github.com/ckeditor/ckeditor5)) for webpage contents, cluster notices
 - Branding customization for multiple domains simultaneously
 - Custom UIDNumber / GIDNumber mappings for specific users
 - Login as another user
diff --git a/resources/templates/header.php b/resources/templates/header.php
@@ -36,9 +36,18 @@
 <html>
 
 <head>
-  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js"></script>
-  <script src="https://cdn.ckeditor.com/ckeditor5/35.1.0/classic/ckeditor.js"></script>
-
+  <script
+    src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js"
+    integrity="sha384-nrOSfDHtoPMzJHjVTdCopGqIqeYETSXhZDFyniQ8ZHcVy08QesyHcnOUpMpqnmWq"
+    crossorigin="anonymous"
+  >
+  </script>
+  <script
+    src="https://cdn.ckeditor.com/ckeditor5/35.1.0/classic/ckeditor.js"
+    integrity="sha384-3j1XQYihAlsFkhoO7ydWkxt9nNxSBnHwJnSG5hx+8fjlz2xfaFHuwOM6T0umxnz6"
+    crossorigin="anonymous"
+  >
+  </script>
   <style>
     <?php
     // set global css variables from branding
