From 2fb924bd3fc38c82f470aa9bbd481a1290389776 Mon Sep 17 00:00:00 2001
From: Petr Viktorin <encukou@gmail.com>
Date: Fri, 17 Jun 2022 17:49:55 +0200
Subject: [PATCH] gh-84461: Tool/wasm/python.html: Add subresource integrity
 hashes

Subresource integrity hashes are is best practice when using
pinned versions of packages, since we don't need to trust the CDN.

(I don't mean to imply anything about unpkg in particular;
in fact it currently seems quite trustworthy.)
---
 Tools/wasm/python.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Tools/wasm/python.html b/Tools/wasm/python.html
index c8d17488b2e70d..03c4e8304a453e 100644
--- a/Tools/wasm/python.html
+++ b/Tools/wasm/python.html
@@ -7,7 +7,7 @@
     <meta name="author" content="Katie Bell">
     <meta name="description" content="Simple REPL for Python WASM">
     <title>wasm-python terminal</title>
-    <link rel="stylesheet" href="https://unpkg.com/xterm@4.18.0/css/xterm.css" crossorigin/>
+    <link rel="stylesheet" href="https://unpkg.com/xterm@4.18.0/css/xterm.css" crossorigin integrity="sha384-4eEEn/eZgVHkElpKAzzPx/Kow/dTSgFk1BNe+uHdjHa+NkZJDh5Vqkq31+y7Eycd"/>
     <style>
         body {
             font-family: arial;
@@ -32,7 +32,7 @@
             padding: 6px 18px;
         }
     </style>
-    <script src="https://unpkg.com/xterm@4.18.0/lib/xterm.js" crossorigin></script>
+    <script src="https://unpkg.com/xterm@4.18.0/lib/xterm.js" crossorigin integrity="sha384-yYdNmem1ioP5Onm7RpXutin5A8TimLheLNQ6tnMi01/ZpxXdAwIm2t4fJMx1Djs+"/></script>
     <script type="module">
 class WorkerManager {
     constructor(workerURL, standardIO, readyCallBack) {