From b919ae667978645da9c4ab3a6534309efe43fd1c Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 14:37:38 +0000
Subject: [PATCH] Add Subresource Integrity (SRI) to JSZip CDN link

This commit adds `integrity` and `crossorigin="anonymous"` attributes to
the `<script>` tag loading JSZip from cdnjs in `docs/index.html`. This
mitigates the risk of executing malicious code if the CDN were to be
compromised.

Co-authored-by: paul0728 <44644609+paul0728@users.noreply.github.com>
---
 docs/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/index.html b/docs/index.html
index 9d406c0..27b912f 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -81,7 +81,7 @@
         }
     </style>
     <!-- Load JSZip for batch archiving -->
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js" integrity="sha512-XMVd28F1oH/O71fzwBnV7HucLxVwtxf26XV8P4wPk26EDxuGZ91N8bsOttmnomcCD3CS5ZMRL50H0GgOHvegtg==" crossorigin="anonymous"></script>
 
     <!-- Load ESM from esm.sh to automatically handle CJS conversion -->
     <script type="importmap">