Recurrent update of embedded Java Script libraries

zzossig / hugo-theme-zzo

Make a blog with hugo zzo theme!

https://themes.gohugo.io//theme/hugo-theme-zzo/en/

MIT License

739 stars 256 forks source link

Recurrent update of embedded Java Script libraries #297

Open szpak opened 4 years ago

szpak commented 4 years ago

It would be good to occasionally (especially on the regular basis) update versions of the embedded libraries. There could be some security (or regular) issues fixed (and of course some new introduced :) ).

rahatzamancse commented 4 years ago

Why not use a cdn? AFAIK CDNs are much more appreciated rather than local css/js.

ahmadkakarr commented 4 years ago

yes i also support cdn

rahatzamancse commented 4 years ago

I have forked this project and changed everything I needed to CDN in the CDN branch myself. If @zzossig wants, I can clean up and give a PR.

szpak commented 4 years ago

@rahatzamancse For your (and your users) safety, you could use Subresource Integrity to verify the loaded library is the one you intended.

There are online generators to make the entries generation easier.