From c8db5ebceef6e611b01d9f39d74355064f561891 Mon Sep 17 00:00:00 2001
From: Tokisaki-Galaxy <moebest@outlook.jp>
Date: Sun, 21 Sep 2025 12:15:15 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0cdn=E7=9A=84SRI?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 _config.yml                            | 6 ++++++
 layout/_partials/css.ejs               | 2 +-
 layout/_partials/plugins/nprogress.ejs | 4 ++--
 layout/_partials/plugins/typed.ejs     | 2 +-
 layout/_partials/scripts.ejs           | 4 ++--
 5 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/_config.yml b/_config.yml
index 6cc364d5..0b120034 100644
--- a/_config.yml
+++ b/_config.yml
@@ -1089,18 +1089,24 @@ static_prefix:
   github_markdown: https://lib.baomitu.com/github-markdown-css/4.0.0/
 
   jquery: https://lib.baomitu.com/jquery/3.6.4/
+  jquery_sri: sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=
 
   bootstrap: https://lib.baomitu.com/twitter-bootstrap/4.6.1/
+  bootstrap_sri: sha256-SyTu6CwrfOhaznYZPoolVw2rxoY7lKYKQvqbtqN93HI=
+  bootstrap_css_sri: sha256-DF7Zhf293AJxJNTmh5zhoYYIMs2oXitRfBjY+9L//AY=
 
   prismjs: https://lib.baomitu.com/prism/1.29.0/
 
   tocbot: https://lib.baomitu.com/tocbot/4.20.1/
 
   typed: https://lib.baomitu.com/typed.js/2.0.12/
+  typed_sri: sha256-UVQ5HtHTmtqBT3KY5cd4AvI47pp0gJwIM+q45HD9oLk=
 
   fancybox: https://lib.baomitu.com/fancybox/3.5.7/
 
   nprogress: https://lib.baomitu.com/nprogress/0.2.0/
+  nprogress_sri: sha256-XWzSUJ+FIQ38dqC06/48sNRwU1Qh3/afjmJ080SneA8=
+  nprogress_css_sri: sha256-pMhcV6/TBDtqH9E9PWKgS+P32PVguLG8IipkPyqMtfY=
 
   mathjax: https://lib.baomitu.com/mathjax/3.2.2/
 
diff --git a/layout/_partials/css.ejs b/layout/_partials/css.ejs
index c86241de..e501d2a9 100644
--- a/layout/_partials/css.ejs
+++ b/layout/_partials/css.ejs
@@ -1,4 +1,4 @@
-<%- css_ex(theme.static_prefix.bootstrap, 'css/bootstrap.min.css') %>
+<link rel="stylesheet" href="<%- theme.static_prefix.bootstrap %>css/bootstrap.min.css" integrity="<%- theme.static_prefix.bootstrap_css_sri %>" crossorigin="anonymous">
 
 <% var css_snippets = deduplicate(page.css_snippets) %>
 <% for (var idx = 0; idx < css_snippets.length; idx++) { %>
diff --git a/layout/_partials/plugins/nprogress.ejs b/layout/_partials/plugins/nprogress.ejs
index d3b1986e..d6c6c966 100644
--- a/layout/_partials/plugins/nprogress.ejs
+++ b/layout/_partials/plugins/nprogress.ejs
@@ -1,6 +1,6 @@
 <% if (theme.fun_features.progressbar && theme.fun_features.progressbar.enable){ %>
-  <%- js_ex(theme.static_prefix.nprogress, 'nprogress.min.js') %>
-  <%- css_ex(theme.static_prefix.nprogress, 'nprogress.min.css') %>
+<script src="<%- theme.static_prefix.nprogress %>nprogress.min.js" integrity="<%- theme.static_prefix.nprogress_sri %>" crossorigin="anonymous"></script>
+<link rel="stylesheet" href="<%- theme.static_prefix.nprogress %>nprogress.min.css" integrity="<%- theme.static_prefix.nprogress_css_sri %>" crossorigin="anonymous">
 
   <script>
     NProgress.configure(<%- JSON.stringify(theme.fun_features.progressbar.options || '{}') %>)
diff --git a/layout/_partials/plugins/typed.ejs b/layout/_partials/plugins/typed.ejs
index 6ccd5dc0..af3b32fd 100644
--- a/layout/_partials/plugins/typed.ejs
+++ b/layout/_partials/plugins/typed.ejs
@@ -1,5 +1,5 @@
 <% if(theme.fun_features.typing.enable && in_scope(theme.fun_features.typing.scope) && page.subtitle !== false) { %>
-  <%- js_ex(theme.static_prefix.typed, '/typed.min.js') %>
+<script src="<%- theme.static_prefix.typed %>typed.min.js" integrity="<%- theme.static_prefix.typed_sri %>" crossorigin="anonymous"></script>
   <script>
     (function (window, document) {
       var typing = Fluid.plugins.typing;
diff --git a/layout/_partials/scripts.ejs b/layout/_partials/scripts.ejs
index 0647d775..d90f30e0 100644
--- a/layout/_partials/scripts.ejs
+++ b/layout/_partials/scripts.ejs
@@ -1,6 +1,6 @@
 <%- partial('_partials/plugins/nprogress.ejs') %>
-<%- js_ex(theme.static_prefix.jquery, 'jquery.min.js') %>
-<%- js_ex(theme.static_prefix.bootstrap, 'js/bootstrap.min.js') %>
+<script src="<%- theme.static_prefix.jquery %>jquery.min.js" integrity="<%- theme.static_prefix.jquery_sri %>" crossorigin="anonymous"></script>
+<script src="<%- theme.static_prefix.bootstrap %>js/bootstrap.min.js" integrity="<%- theme.static_prefix.bootstrap_sri %>" crossorigin="anonymous"></script>
 <%- js_ex(theme.static_prefix.internal_js, 'events.js') %>
 <%- js_ex(theme.static_prefix.internal_js, 'plugins.js') %>