From 92beb8bf790ea7942439b9b16274e68628e60175 Mon Sep 17 00:00:00 2001 From: Harry Bridge Date: Sat, 12 Mar 2016 18:12:39 +0000 Subject: [PATCH 1/4] Fixed jquery version --- templates/base.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/base.html b/templates/base.html index 23476432..d190e724 100644 --- a/templates/base.html +++ b/templates/base.html @@ -21,7 +21,7 @@ {% block css %} {% endblock %} - + {% block preload_js %} From 5d48d75f342b94f0b35c5b9f6b06b3135aa002a5 Mon Sep 17 00:00:00 2001 From: Harry Bridge Date: Sat, 12 Mar 2016 18:17:03 +0000 Subject: [PATCH 2/4] Make protocol-agnostic --- templates/base.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/base.html b/templates/base.html index d190e724..cc3e9dd5 100644 --- a/templates/base.html +++ b/templates/base.html @@ -21,7 +21,7 @@ {% block css %} {% endblock %} - + {% block preload_js %} From 54dc29b4b28074c1e25b619448e0997810015ff0 Mon Sep 17 00:00:00 2001 From: Tom Price Date: Thu, 17 Mar 2016 17:18:42 +0000 Subject: [PATCH 3/4] Switch to jquery CDN who provide a sha256 hash to validate against. Advise is now to always use HTTPS for libraries as somebody else manages the certificate it will always validate and it makes sure that a large target doesn't get subject to MITM attack. --- templates/base.html | 62 ++++++++++++++++++++++++++------------------- 1 file changed, 36 insertions(+), 26 deletions(-) diff --git a/templates/base.html b/templates/base.html index cc3e9dd5..c27231bd 100644 --- a/templates/base.html +++ b/templates/base.html @@ -14,14 +14,16 @@ - + {% block css %} {% endblock %} - + {% block preload_js %} @@ -46,32 +48,40 @@