From 3fd0a25c70ec85bab724317e1ef21007e676b645 Mon Sep 17 00:00:00 2001
From: echarp <manu@echarp.org>
Date: Sun, 7 May 2023 17:51:04 +0200
Subject: [PATCH] Integrity management for external js

---
 bin/acoeur.conf                                 |  5 +++--
 .../acoeur/layouts/partials/head-additions.html | 17 +++++++++++------
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/bin/acoeur.conf b/bin/acoeur.conf
index 9298b2b..4535d98 100644
--- a/bin/acoeur.conf
+++ b/bin/acoeur.conf
@@ -7,7 +7,7 @@
 
   <Directory /var/simpleWeb/apps/acoeur/*>
     AuthUserFile /home/manu/Adata/.htaccessPasswords
-    AuthName "Quiz d'A Livr'Ouvert"
+    AuthName "Moteur acoeur"
     AuthType Basic
     Require user mag manu amelie tiffany
   </Directory>
@@ -32,7 +32,8 @@
 
   CustomLog /var/simpleWeb/log/apache/acoeur.log combined
 
-	Header always set Access-Control-Allow-Origin "cdnjs.cloudflare.com"
+  # Some level of protection against attacks
+  Header always set Access-Control-Allow-Origin "https://cdn.jsdelivr.net"
 </VirtualHost>
 
 <VirtualHost *:80>
diff --git a/themes/acoeur/layouts/partials/head-additions.html b/themes/acoeur/layouts/partials/head-additions.html
index 7bb6153..a8de4fe 100644
--- a/themes/acoeur/layouts/partials/head-additions.html
+++ b/themes/acoeur/layouts/partials/head-additions.html
@@ -1,14 +1,14 @@
 <script>const file = '{{ .File }}'</script>
 
 <script defer
-				src="https://cdnjs.cloudflare.com/ajax/libs/tinymce/6.4.2/tinymce.min.js"
-				integrity="sha512-sWydClczl0KPyMWlARx1JaxJo2upoMYb9oh5IHwudGfICJ/8qaCyqhNTP5aa9Xx0aCRBwh71eZchgz0a4unoyQ==">
-</script>
+	src="https://cdn.jsdelivr.net/npm/tinymce@6.4.2/tinymce.min.js"
+	integrity="sha256-IkzPrE0TvQ1UKCWBCCRVNpDBU3CxMyQE6yLepGnV1sA="
+	crossorigin="anonymous"></script>
 
 <script defer
-				src="https://cdn.jsdelivr.net/npm/easyqrcodejs@4.4.13/dist/easy.qrcode.min.js"
-				integrity="sha256-ysnj5Mp9adRzpXyhbGW2YTdUSpdapignH3Z57bMq6G8=">
-</script>
+	src="https://cdn.jsdelivr.net/npm/easyqrcodejs@4.4.13/dist/easy.qrcode.min.js"
+	integrity="sha256-ysnj5Mp9adRzpXyhbGW2YTdUSpdapignH3Z57bMq6G8="
+	crossorigin="anonymous"></script>
 
 {{ with resources.Get "js/misc.js" | minify | fingerprint }}
 <script defer src="{{ .Permalink }}"></script>
@@ -41,3 +41,8 @@
 {{ with resources.Get "js/prettify.js" | minify | fingerprint }}
 <script defer src="{{ .Permalink }}"></script>
 {{ end }}
+
+<link rel="stylesheet"
+	href="https://cdn.jsdelivr.net/npm/tinymce@6.4.2/skins/ui/oxide/content.min.css"
+	integrity="sha256-ml3zmaOLzm/5Si2U6xuyLoBd9Vb+ltL2pBwZuz3hBxU="
+	crossorigin="anonymous">
\ No newline at end of file