From 11273e184e5fd1ee7ad79b50b5ed1b1d0e92d5c8 Mon Sep 17 00:00:00 2001
From: "David @ HASH" <6226576+nonparibus@users.noreply.github.com>
Date: Sun, 3 Sep 2023 12:31:45 +0100
Subject: [PATCH] Add integrity SHA-256 to externally loaded asset (#40)

Even though this POC is neither actively used nor maintained, this satisfies CodeQL and ensures the right resource is always loaded from the external URL.
---
 pocs/distributed_collab/priv/static/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pocs/distributed_collab/priv/static/index.html b/pocs/distributed_collab/priv/static/index.html
index ed36ac0..91dac92 100644
--- a/pocs/distributed_collab/priv/static/index.html
+++ b/pocs/distributed_collab/priv/static/index.html
@@ -24,7 +24,7 @@
     <h1>Collaborative JSON editing</h1>
     <div id="container"></div>
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/fast-json-patch/3.1.1/fast-json-patch.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/fast-json-patch/3.1.1/fast-json-patch.js" integrity="sha256-Qf9lvjtL7xCt5niiMAxwQDC+TowsJAqGo7aA4TEYQRw=" crossorigin="anonymous"></script>
 
     <script>
       const container = document.querySelector("#container");