From a3512decace7ee27e8fe86ae89c47c35b7cc7de0 Mon Sep 17 00:00:00 2001
From: Mark Eaton <MarkEEaton@users.noreply.github.com>
Date: Sat, 13 Jun 2026 23:51:18 -0400
Subject: [PATCH] Add SRI hash and crossorigin to cdnjs Vue script

---
 groups/home/bootstrap5/home1.html | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/groups/home/bootstrap5/home1.html b/groups/home/bootstrap5/home1.html
index e487268..3c4fe9e 100644
--- a/groups/home/bootstrap5/home1.html
+++ b/groups/home/bootstrap5/home1.html
@@ -399,7 +399,12 @@
 
   <!-- add Vue scripts -->
   <!-- <script src="https://cdnjs.cloudflare.com/ajax/libs/vue/3.5.22/vue.global.js"></script> development script-->
-  <script src="https://cdnjs.cloudflare.com/ajax/libs/vue/3.5.22/vue.global.prod.js"></script> <!-- production script -->
+  <!-- production: SRI hash so a tampered/changed file won't execute; Renovate bumps version + hash together -->
+  <script
+    src="https://cdnjs.cloudflare.com/ajax/libs/vue/3.5.22/vue.global.prod.js"
+    integrity="sha384-8b+88atXoPL4ijtVqe+2pA+PC8VNYSGqubRseMLV0qxfa5GMHeftEEHvk4eM4RFT"
+    crossorigin="anonymous"
+  ></script>
   <script
     type="text/javascript"
     src="https://libapps.s3.amazonaws.com/sites/2365/include/home1.js"