silverbulletmd / silverbullet

The knowledge tinkerer's notebook
https://silverbullet.md
MIT License
2.59k stars 189 forks source link

Enabler to make scripts loaded from CDN more secure #1127

Closed gorootde closed 1 month ago

gorootde commented 1 month ago

This adds the possibility to set an integrity hash for the script tag that is e.g. used by the mermaid plug. If properly used, this will prevent manipulated CDN sources from being loaded into silverbullet.

zefhemel commented 1 month ago

Nice!