Skip to content

Commit 32512b2

Browse files
committed
Use multiple integrity attributes for require.min.js
We observed that VS Code and Chrome each compute different integrity values. This is apparently expected behavior in some cases: https://claude.ai/share/7c3437d9-664e-4e82-aa92-6bdf37ff9025 Possible mitigations include: 1) Define multiple values for `integrity` (what we did here); or 2) Remove the `integrity` attribute if you trust the host and are running over https. 3) Bundle our own version of require.js
1 parent 92119d5 commit 32512b2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/core/jupyter/widgets.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,7 @@ export function includesForJupyterWidgetDependencies(
101101
const head: string[] = [];
102102
if (haveJavascriptWidgets || haveJupyterWidgets) {
103103
head.push(
104-
'<script src="https://cdn.jsdelivr.net/npm/[email protected]/require.min.js" integrity="sha384-6V1/AdqZRWk1KAlWbKBlGhN7VG4iE/yAZcO6NZPMF8od0vukrvr0tg4qY6NSrItx" crossorigin="anonymous"></script>',
104+
'<script src="https://cdn.jsdelivr.net/npm/[email protected]/require.min.js" integrity="sha384-c9c+LnTbwQ3aujuU7ULEPVvgLs+Fn6fJUvIGTsuu1ZcCf11fiEubah0ttpca4ntM sha384-6V1/AdqZRWk1KAlWbKBlGhN7VG4iE/yAZcO6NZPMF8od0vukrvr0tg4qY6NSrItx" crossorigin="anonymous"></script>',
105105
);
106106
head.push(
107107
'<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous" data-relocate-top="true"></script>',

0 commit comments

Comments
 (0)