From e8e4992a00b2850ff13ce45da5628869edea0b29 Mon Sep 17 00:00:00 2001
From: Tessa Alexander <tessa.alexander@bristol.ac.uk>
Date: Tue, 23 Jan 2024 17:46:06 +0000
Subject: [PATCH] Add SRI integrity to CDN hosted JS resources

---
 browser/templates/results.html         | 1 -
 browser/templates/results_listing.html | 9 ++++-----
 browser/templates/user_listing.html    | 9 +++------
 3 files changed, 7 insertions(+), 12 deletions(-)

diff --git a/browser/templates/results.html b/browser/templates/results.html
index 366c360c..aff13890 100644
--- a/browser/templates/results.html
+++ b/browser/templates/results.html
@@ -83,7 +83,6 @@ <h2>Original results <i class="fa fa-code-fork" title="Previous version" style="
         {% endif %}
     </div>
 {% endif %}
-
 {% endblock %}
 
 {% block scripts %}
diff --git a/browser/templates/results_listing.html b/browser/templates/results_listing.html
index 28ca56f3..73e6a03c 100644
--- a/browser/templates/results_listing.html
+++ b/browser/templates/results_listing.html
@@ -11,9 +11,9 @@
 
 {% block scripts %}
 <!-- DataTables JavaScript -->
-<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js"></script>
-<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap.min.js"></script>
-<script src="https://cdn.datatables.net/responsive/2.5.0/js/dataTables.responsive.min.js"></script>
+<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js" integrity="sha512-BQ3f0AMbTpWxc4YSQm03nL5LX7mb4KhgNQfEowc6IdpylTaRuzkiChTJISQlKWaof0rIYtHRaRBEl8G6F8GxzA==" crossorigin="anonymous"></script>
+<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap.min.js" integrity="sha512-zAokAlVr3ADuYA4Z+Z4pQWPYZIqPwhGkvAqIFXA8PaPqtql3j6eBlMr6DK9UWNJBRuaJpk4CZUo44wCnGu8paA==" crossorigin="anonymous"></script>
+<script src="https://cdn.datatables.net/responsive/2.5.0/js/dataTables.responsive.min.js" integrity="sha512-GFDiZYmIUHTqigl5L9/ABb+r8R2RlfDevKYvOqkH1QxdUk270OJ7gmdFrvk6bcZXijqG6FrbEajw/Dqx4qnlMA==" crossorigin="anonymous"></script>
 <script>
 $(document).ready(function() {
     $('#results').DataTable({
@@ -37,7 +37,7 @@
 {% if messages %}
     <ul class="errorlist">
         {% for message in messages %}
-        <li{% if message.tags %} class="{{ message.tags }}"{% endif %}>{{ message }}</li>
+        <li {% if message.tags %}class="{{ message.tags }}"{% endif %}>{{ message }}</li>
         {% endfor %}
     </ul>
 {% endif %}
@@ -72,7 +72,6 @@
     </tbody>
 </table>
 <hr />
-
 {% endif %}
 
 <table id="results" class="table table-striped table-bordered table-hover compact">
diff --git a/browser/templates/user_listing.html b/browser/templates/user_listing.html
index 6dae143e..3280db1e 100644
--- a/browser/templates/user_listing.html
+++ b/browser/templates/user_listing.html
@@ -11,9 +11,9 @@
 
 {% block scripts %}
 <!-- DataTables JavaScript -->
-<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js"></script>
-<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap.min.js"></script>
-<script src="https://cdn.datatables.net/responsive/2.5.0/js/dataTables.responsive.min.js"></script>
+<script src="https://cdn.datatables.net/1.13.8/js/jquery.dataTables.min.js" integrity="sha512-BQ3f0AMbTpWxc4YSQm03nL5LX7mb4KhgNQfEowc6IdpylTaRuzkiChTJISQlKWaof0rIYtHRaRBEl8G6F8GxzA==" crossorigin="anonymous"></script>
+<script src="https://cdn.datatables.net/1.13.8/js/dataTables.bootstrap.min.js" integrity="sha512-zAokAlVr3ADuYA4Z+Z4pQWPYZIqPwhGkvAqIFXA8PaPqtql3j6eBlMr6DK9UWNJBRuaJpk4CZUo44wCnGu8paA==" crossorigin="anonymous"></script>
+<script src="https://cdn.datatables.net/responsive/2.5.0/js/dataTables.responsive.min.js" integrity="sha512-GFDiZYmIUHTqigl5L9/ABb+r8R2RlfDevKYvOqkH1QxdUk270OJ7gmdFrvk6bcZXijqG6FrbEajw/Dqx4qnlMA==" crossorigin="anonymous"></script>
 <script>
 $(document).ready(function() {
     $('#users').DataTable({
@@ -26,13 +26,11 @@
     });
 } );
 </script>
-
 {% endblock %}
 
 {% block section_title %}Manage users{% endblock %}
 
 {% block section %}
-
 {% if messages %}
     <ul class="errorlist">
         {% for message in messages %}
@@ -71,5 +69,4 @@
         {% endfor %}
     </tbody>
 </table>
-
 {% endblock %}