From 06f2cb7c749b5c0ccc291e397806bad0308ccfc7 Mon Sep 17 00:00:00 2001 From: Peter Law Date: Thu, 11 May 2023 23:11:17 +0100 Subject: [PATCH] Add subresource integrity checking to our user-tracking script If we're going to track users we should at least ensure that the script which does so is what we're expecting. The value here is derived from a manual check of the current version of the file. I couldn't find anything on Plausible's website about this, so I'm just guessing that this is ok to do. Ideally it feels like we should pin the version of the library we're pulling in, however I couldn't find anything on how to do that either. --- _includes/script.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_includes/script.html b/_includes/script.html index 1de6833c..0ed14a27 100644 --- a/_includes/script.html +++ b/_includes/script.html @@ -2,5 +2,5 @@ {% if site.user_tracking %} - + {% endif %}