From b789e5d78dc66f6d434c194de34d684116c7eae6 Mon Sep 17 00:00:00 2001
From: rhymes <rhymesete@gmail.com>
Date: Fri, 22 Mar 2019 19:14:59 +0100
Subject: [PATCH] Add SRI to script tags where applicable (#2153)

* Add SRI to script tags

* Update app/views/articles/_hiring_form.html.erb

Good point :)

Co-Authored-By: rhymes <rhymesete@gmail.com>
---
 app/views/articles/_hiring_form.html.erb |   3 +-
 app/views/blocks/_form.html.erb          |  15 +-
 app/views/giveaways/_form.html.erb       | 383 ++++++++++++-----------
 app/views/internal/tags/index.html.erb   |   3 +-
 app/views/pages/generator.html.erb       |   3 +-
 app/views/tags/edit.html.erb             |   4 +-
 app/views/users/_org_admin.html.erb      |   4 +-
 app/views/users/_org_non_member.html.erb |   4 +-
 app/views/users/_profile.html.erb        |   4 +-
 app/views/videos/new.html.erb            |   5 +-
 10 files changed, 223 insertions(+), 205 deletions(-)

diff --git a/app/views/articles/_hiring_form.html.erb b/app/views/articles/_hiring_form.html.erb
index 0cbfe31f4..c7cc7b9dd 100644
--- a/app/views/articles/_hiring_form.html.erb
+++ b/app/views/articles/_hiring_form.html.erb
@@ -1,4 +1,5 @@
-<script src="https://cdn.jsdelivr.net/npm/places.js@1.4.15"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/places.js/1.4.15/places.min.js"
+        integrity="sha256-omJTH9gP+kg7eWch+tko/pH2dPinDVAu6uANm5AJeFI=" crossorigin="anonymous"></script>
 <div id="hiring-form" class="hiring-form">
   <%= f.fields_for @article.job_opportunity || JobOpportunity.new do |jo| %>
     <h2>Where is your office located?</h2>
diff --git a/app/views/blocks/_form.html.erb b/app/views/blocks/_form.html.erb
index bc10cff28..89eefe201 100644
--- a/app/views/blocks/_form.html.erb
+++ b/app/views/blocks/_form.html.erb
@@ -1,8 +1,13 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.js"></script>
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.css">
-<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/css/css.js"></script>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/javascript/javascript.js"></script>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/htmlmixed/htmlmixed.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.js"
+  integrity="sha256-UQey9E6ZZXhvoLNXvVmU5lRSbOcCZe707EBLJTtMwSc=" crossorigin="anonymous"></script>
+<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/codemirror.min.css"
+  integrity="sha256-GGAcbnLrt4/AHq5cP2+2UWetYcNsQNjNMqSRStBoPLQ=" crossorigin="anonymous" />
+<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/css/css.min.js"
+  integrity="sha256-FM1AMdIH6Zrnz+JGuB5uTB6jxAJ8/XvGvq4HJM0YtDQ=" crossorigin="anonymous"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/javascript/javascript.min.js"
+  integrity="sha256-Zci/fLjT1ALmFze3qSOXnHkYOOpyj5WUHM/Ioy+Bpyo=" crossorigin="anonymous"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.26.0/mode/htmlmixed/htmlmixed.min.js"
+  integrity="sha256-fYwhT0v38tXMnxU+JibUW1drchatADDwdPWvOuxI/yg=" crossorigin="anonymous"></script>
 
 <script>
   setTimeout(function () {
diff --git a/app/views/giveaways/_form.html.erb b/app/views/giveaways/_form.html.erb
index 549c078bc..bc72f9552 100644
--- a/app/views/giveaways/_form.html.erb
+++ b/app/views/giveaways/_form.html.erb
@@ -1,4 +1,5 @@
-<script src="//ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"
+  integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>
 <script src="//d79i1fxsrar4t.cloudfront.net/jquery.liveaddress/3.4/jquery.liveaddress.min.js"></script>
 <script>
   var liveaddress = jQuery.LiveAddress({
@@ -74,190 +75,190 @@
                  options_for_select(
                    [["United States", "US"],
                     ["-----", ""],
-                    ["Afghanistan", "AF"],
+                    %w[Afghanistan AF],
                     ["Åland Islands", "AX"],
-                    ["Albania", "AL"],
-                    ["Algeria", "DZ"],
+                    %w[Albania AL],
+                    %w[Algeria DZ],
                     ["American Samoa", "AS"],
-                    ["Andorra", "AD"],
-                    ["Angola", "AO"],
-                    ["Anguilla", "AI"],
-                    ["Antarctica", "AQ"],
+                    %w[Andorra AD],
+                    %w[Angola AO],
+                    %w[Anguilla AI],
+                    %w[Antarctica AQ],
                     ["Antigua and Barbuda", "AG"],
-                    ["Argentina", "AR"],
-                    ["Armenia", "AM"],
-                    ["Aruba", "AW"],
-                    ["Australia", "AU"],
-                    ["Austria", "AT"],
-                    ["Azerbaijan", "AZ"],
-                    ["Bahamas", "BS"],
-                    ["Bahrain", "BH"],
-                    ["Bangladesh", "BD"],
-                    ["Barbados", "BB"],
-                    ["Belarus", "BY"],
-                    ["Belgium", "BE"],
-                    ["Belize", "BZ"],
-                    ["Benin", "BJ"],
-                    ["Bermuda", "BM"],
-                    ["Bhutan", "BT"],
-                    ["Bolivia", "BO"],
-                    ["Bonaire", "BQ"],
+                    %w[Argentina AR],
+                    %w[Armenia AM],
+                    %w[Aruba AW],
+                    %w[Australia AU],
+                    %w[Austria AT],
+                    %w[Azerbaijan AZ],
+                    %w[Bahamas BS],
+                    %w[Bahrain BH],
+                    %w[Bangladesh BD],
+                    %w[Barbados BB],
+                    %w[Belarus BY],
+                    %w[Belgium BE],
+                    %w[Belize BZ],
+                    %w[Benin BJ],
+                    %w[Bermuda BM],
+                    %w[Bhutan BT],
+                    %w[Bolivia BO],
+                    %w[Bonaire BQ],
                     ["Bosnia and Herzegovina", "BA"],
-                    ["Botswana", "BW"],
+                    %w[Botswana BW],
                     ["Bouvet Island", "BV"],
-                    ["Brazil", "BR"],
+                    %w[Brazil BR],
                     ["BIO Territory", "IO"],
                     ["Brunei Darussalam", "BN"],
-                    ["Bulgaria", "BG"],
+                    %w[Bulgaria BG],
                     ["Burkina Faso", "BF"],
-                    ["Burundi", "BI"],
-                    ["Cambodia", "KH"],
-                    ["Cameroon", "CM"],
-                    ["Canada", "CA"],
+                    %w[Burundi BI],
+                    %w[Cambodia KH],
+                    %w[Cameroon CM],
+                    %w[Canada CA],
                     ["Cape Verde", "CV"],
                     ["Cayman Islands", "KY"],
                     ["Central African Republic", "CF"],
-                    ["Chad", "TD"],
-                    ["Chile", "CL"],
-                    ["China", "CN"],
+                    %w[Chad TD],
+                    %w[Chile CL],
+                    %w[China CN],
                     ["Christmas Island", "CX"],
                     ["Cocos (Keeling) Islands", "CC"],
-                    ["Colombia", "CO"],
-                    ["Comoros", "KM"],
-                    ["Congo", "CG"],
-                    ["Congo", "CD"],
+                    %w[Colombia CO],
+                    %w[Comoros KM],
+                    %w[Congo CG],
+                    %w[Congo CD],
                     ["Cook Islands", "CK"],
                     ["Costa Rica", "CR"],
                     ["Côte d'Ivoire", "CI"],
-                    ["Croatia", "HR"],
-                    ["Cuba", "CU"],
-                    ["Curaçao", "CW"],
-                    ["Cyprus", "CY"],
+                    %w[Croatia HR],
+                    %w[Cuba CU],
+                    %w[Curaçao CW],
+                    %w[Cyprus CY],
                     ["Czech Republic", "CZ"],
-                    ["Denmark", "DK"],
-                    ["Djibouti", "DJ"],
-                    ["Dominica", "DM"],
+                    %w[Denmark DK],
+                    %w[Djibouti DJ],
+                    %w[Dominica DM],
                     ["Dominican Republic", "DO"],
-                    ["Ecuador", "EC"],
-                    ["Egypt", "EG"],
+                    %w[Ecuador EC],
+                    %w[Egypt EG],
                     ["El Salvador", "SV"],
                     ["Equatorial Guinea", "GQ"],
-                    ["Eritrea", "ER"],
-                    ["Estonia", "EE"],
-                    ["Ethiopia", "ET"],
+                    %w[Eritrea ER],
+                    %w[Estonia EE],
+                    %w[Ethiopia ET],
                     ["Falkland Islands", "FK"],
                     ["Faroe Islands", "FO"],
-                    ["Fiji", "FJ"],
-                    ["Finland", "FI"],
-                    ["France", "FR"],
+                    %w[Fiji FJ],
+                    %w[Finland FI],
+                    %w[France FR],
                     ["French Guiana", "GF"],
                     ["French Polynesia", "PF"],
                     ["French S Territories", "TF"],
-                    ["Gabon", "GA"],
-                    ["Gambia", "GM"],
-                    ["Georgia", "GE"],
-                    ["Germany", "DE"],
-                    ["Ghana", "GH"],
-                    ["Gibraltar", "GI"],
-                    ["Greece", "GR"],
-                    ["Greenland", "GL"],
-                    ["Grenada", "GD"],
-                    ["Guadeloupe", "GP"],
-                    ["Guam", "GU"],
-                    ["Guatemala", "GT"],
-                    ["Guernsey", "GG"],
-                    ["Guinea", "GN"],
+                    %w[Gabon GA],
+                    %w[Gambia GM],
+                    %w[Georgia GE],
+                    %w[Germany DE],
+                    %w[Ghana GH],
+                    %w[Gibraltar GI],
+                    %w[Greece GR],
+                    %w[Greenland GL],
+                    %w[Grenada GD],
+                    %w[Guadeloupe GP],
+                    %w[Guam GU],
+                    %w[Guatemala GT],
+                    %w[Guernsey GG],
+                    %w[Guinea GN],
                     ["Guinea-Bissau", "GW"],
-                    ["Guyana", "GY"],
-                    ["Haiti", "HT"],
+                    %w[Guyana GY],
+                    %w[Haiti HT],
                     ["Heard McDonald Islands", "HM"],
                     ["Holy See", "VA"],
-                    ["Honduras", "HN"],
+                    %w[Honduras HN],
                     ["Hong Kong", "HK"],
-                    ["Hungary", "HU"],
-                    ["Iceland", "IS"],
-                    ["India", "IN"],
-                    ["Indonesia", "ID"],
-                    ["Iran", "IR"],
-                    ["Iraq", "IQ"],
-                    ["Ireland", "IE"],
+                    %w[Hungary HU],
+                    %w[Iceland IS],
+                    %w[India IN],
+                    %w[Indonesia ID],
+                    %w[Iran IR],
+                    %w[Iraq IQ],
+                    %w[Ireland IE],
                     ["Isle of Man", "IM"],
-                    ["Israel", "IL"],
-                    ["Italy", "IT"],
-                    ["Jamaica", "JM"],
-                    ["Japan", "JP"],
-                    ["Jersey", "JE"],
-                    ["Jordan", "JO"],
-                    ["Kazakhstan", "KZ"],
-                    ["Kenya", "KE"],
-                    ["Kiribati", "KI"],
+                    %w[Israel IL],
+                    %w[Italy IT],
+                    %w[Jamaica JM],
+                    %w[Japan JP],
+                    %w[Jersey JE],
+                    %w[Jordan JO],
+                    %w[Kazakhstan KZ],
+                    %w[Kenya KE],
+                    %w[Kiribati KI],
                     ["Korea, People's Republic", "KP"],
                     ["Korea, Republic of", "KR"],
-                    ["Kuwait", "KW"],
-                    ["Kyrgyzstan", "KG"],
-                    ["Lao", "LA"],
-                    ["Latvia", "LV"],
-                    ["Lebanon", "LB"],
-                    ["Lesotho", "LS"],
-                    ["Liberia", "LR"],
-                    ["Libya", "LY"],
-                    ["Liechtenstein", "LI"],
-                    ["Lithuania", "LT"],
-                    ["Luxembourg", "LU"],
-                    ["Macao", "MO"],
-                    ["Macedonia", "MK"],
-                    ["Madagascar", "MG"],
-                    ["Malawi", "MW"],
-                    ["Malaysia", "MY"],
-                    ["Maldives", "MV"],
-                    ["Mali", "ML"],
-                    ["Malta", "MT"],
+                    %w[Kuwait KW],
+                    %w[Kyrgyzstan KG],
+                    %w[Lao LA],
+                    %w[Latvia LV],
+                    %w[Lebanon LB],
+                    %w[Lesotho LS],
+                    %w[Liberia LR],
+                    %w[Libya LY],
+                    %w[Liechtenstein LI],
+                    %w[Lithuania LT],
+                    %w[Luxembourg LU],
+                    %w[Macao MO],
+                    %w[Macedonia MK],
+                    %w[Madagascar MG],
+                    %w[Malawi MW],
+                    %w[Malaysia MY],
+                    %w[Maldives MV],
+                    %w[Mali ML],
+                    %w[Malta MT],
                     ["Marshall Islands", "MH"],
-                    ["Martinique", "MQ"],
-                    ["Mauritania", "MR"],
-                    ["Mauritius", "MU"],
-                    ["Mayotte", "YT"],
-                    ["Mexico", "MX"],
-                    ["Micronesia", "FM"],
+                    %w[Martinique MQ],
+                    %w[Mauritania MR],
+                    %w[Mauritius MU],
+                    %w[Mayotte YT],
+                    %w[Mexico MX],
+                    %w[Micronesia FM],
                     ["Moldova, Republic of", "MD"],
-                    ["Monaco", "MC"],
-                    ["Mongolia", "MN"],
-                    ["Montenegro", "ME"],
-                    ["Montserrat", "MS"],
-                    ["Morocco", "MA"],
-                    ["Mozambique", "MZ"],
-                    ["Myanmar", "MM"],
-                    ["Namibia", "NA"],
-                    ["Nauru", "NR"],
-                    ["Nepal", "NP"],
-                    ["Netherlands", "NL"],
+                    %w[Monaco MC],
+                    %w[Mongolia MN],
+                    %w[Montenegro ME],
+                    %w[Montserrat MS],
+                    %w[Morocco MA],
+                    %w[Mozambique MZ],
+                    %w[Myanmar MM],
+                    %w[Namibia NA],
+                    %w[Nauru NR],
+                    %w[Nepal NP],
+                    %w[Netherlands NL],
                     ["New Caledonia", "NC"],
                     ["New Zealand", "NZ"],
-                    ["Nicaragua", "NI"],
-                    ["Niger", "NE"],
-                    ["Nigeria", "NG"],
-                    ["Niue", "NU"],
+                    %w[Nicaragua NI],
+                    %w[Niger NE],
+                    %w[Nigeria NG],
+                    %w[Niue NU],
                     ["Norfolk Island", "NF"],
                     ["Northern Mariana Islands", "MP"],
-                    ["Norway", "NO"],
-                    ["Oman", "OM"],
-                    ["Pakistan", "PK"],
-                    ["Palau", "PW"],
+                    %w[Norway NO],
+                    %w[Oman OM],
+                    %w[Pakistan PK],
+                    %w[Palau PW],
                     ["Palestinian Territory", "PS"],
-                    ["Panama", "PA"],
+                    %w[Panama PA],
                     ["Papua New Guinea", "PG"],
-                    ["Paraguay", "PY"],
-                    ["Peru", "PE"],
-                    ["Philippines", "PH"],
-                    ["Pitcairn", "PN"],
-                    ["Poland", "PL"],
-                    ["Portugal", "PT"],
+                    %w[Paraguay PY],
+                    %w[Peru PE],
+                    %w[Philippines PH],
+                    %w[Pitcairn PN],
+                    %w[Poland PL],
+                    %w[Portugal PT],
                     ["Puerto Rico", "PR"],
-                    ["Qatar", "QA"],
-                    ["Réunion", "RE"],
-                    ["Romania", "RO"],
+                    %w[Qatar QA],
+                    %w[Réunion RE],
+                    %w[Romania RO],
                     ["Russian Federation", "RU"],
-                    ["Rwanda", "RW"],
+                    %w[Rwanda RW],
                     ["Saint Barthélemy", "BL"],
                     ["Saint Helena", "SH"],
                     ["Saint Kitts and Nevis", "KN"],
@@ -265,64 +266,64 @@
                     ["Saint Martin (French part)", "MF"],
                     ["Saint Pierre and Miquelon", "PM"],
                     ["Saint Vincent, Grenadines", "VC"],
-                    ["Samoa", "WS"],
+                    %w[Samoa WS],
                     ["San Marino", "SM"],
                     ["Sao Tome and Principe", "ST"],
                     ["Saudi Arabia", "SA"],
-                    ["Senegal", "SN"],
-                    ["Serbia", "RS"],
-                    ["Seychelles", "SC"],
+                    %w[Senegal SN],
+                    %w[Serbia RS],
+                    %w[Seychelles SC],
                     ["Sierra Leone", "SL"],
-                    ["Singapore", "SG"],
+                    %w[Singapore SG],
                     ["Sint Maarten (Dutch part)", "SX"],
-                    ["Slovakia", "SK"],
-                    ["Slovenia", "SI"],
+                    %w[Slovakia SK],
+                    %w[Slovenia SI],
                     ["Solomon Islands", "SB"],
-                    ["Somalia", "SO"],
+                    %w[Somalia SO],
                     ["South Africa", "ZA"],
                     ["South Georgia", "GS"],
                     ["South Sudan", "SS"],
-                    ["Spain", "ES"],
+                    %w[Spain ES],
                     ["Sri Lanka", "LK"],
-                    ["Sudan", "SD"],
-                    ["Suriname", "SR"],
+                    %w[Sudan SD],
+                    %w[Suriname SR],
                     ["Svalbard and Jan Mayen", "SJ"],
-                    ["Swaziland", "SZ"],
-                    ["Sweden", "SE"],
-                    ["Switzerland", "CH"],
+                    %w[Swaziland SZ],
+                    %w[Sweden SE],
+                    %w[Switzerland CH],
                     ["Syrian Arab Republic", "SY"],
                     ["Taiwan, Province of China", "TW"],
-                    ["Tajikistan", "TJ"],
-                    ["Tanzania", "TZ"],
-                    ["Thailand", "TH"],
+                    %w[Tajikistan TJ],
+                    %w[Tanzania TZ],
+                    %w[Thailand TH],
                     ["Timor-Leste", "TL"],
-                    ["Togo", "TG"],
-                    ["Tokelau", "TK"],
-                    ["Tonga", "TO"],
+                    %w[Togo TG],
+                    %w[Tokelau TK],
+                    %w[Tonga TO],
                     ["Trinidad and Tobago", "TT"],
-                    ["Tunisia", "TN"],
-                    ["Turkey", "TR"],
-                    ["Turkmenistan", "TM"],
+                    %w[Tunisia TN],
+                    %w[Turkey TR],
+                    %w[Turkmenistan TM],
                     ["Turks and Caicos Isl", "TC"],
-                    ["Tuvalu", "TV"],
-                    ["Uganda", "UG"],
-                    ["Ukraine", "UA"],
+                    %w[Tuvalu TV],
+                    %w[Uganda UG],
+                    %w[Ukraine UA],
                     ["United Arab Emirates", "AE"],
                     ["United Kingdom", "GB"],
                     ["United States", "US"],
                     ["United States Minor", "UM"],
-                    ["Uruguay", "UY"],
-                    ["Uzbekistan", "UZ"],
-                    ["Vanuatu", "VU"],
-                    ["Venezuela", "VE"],
+                    %w[Uruguay UY],
+                    %w[Uzbekistan UZ],
+                    %w[Vanuatu VU],
+                    %w[Venezuela VE],
                     ["Viet Nam", "VN"],
                     ["Virgin Islands, British", "VG"],
                     ["Virgin Islands, U.S.", "VI"],
                     ["Wallis and Futuna", "WF"],
                     ["Western Sahara", "EH"],
-                    ["Yemen", "YE"],
-                    ["Zambia", "ZM"],
-                    ["Zimbabwe", "ZW"]],
+                    %w[Yemen YE],
+                    %w[Zambia ZM],
+                    %w[Zimbabwe ZW]],
                    @user.shipping_country,
                  ) %>
   </div>
@@ -339,7 +340,7 @@
     <%= f.label :shirt_gender, "Style" %><br>
     <%= f.select :shirt_gender,
                  options_for_select(
-                   [["Unisex", "unisex"],
+                   [%w[Unisex unisex],
                     ["Women's", "womens"]],
                    @user.shirt_gender,
                  ) %>
@@ -348,12 +349,12 @@
     <%= f.label :shirt_size, "Size" %><br>
     <%= f.select :shirt_size,
                  options_for_select(
-                   [["Small", "s"],
-                    ["Medium", "m"],
-                    ["Large", "l"],
+                   [%w[Small s],
+                    %w[Medium m],
+                    %w[Large l],
                     ["Extra Large", "xl"],
-                    ["2XL", "2xl"],
-                    ["3XL", "3xl"]],
+                    %w[2XL 2xl],
+                    %w[3XL 3xl]],
                    @user.shirt_size,
                  ) %>
   </div>
@@ -372,15 +373,15 @@
     <%= f.select :experience_level,
                  options_for_select(
                    [["0 (Complete Newbie)", "0"],
-                    ["1", "1"],
-                    ["2", "2"],
+                    %w[1 1],
+                    %w[2 2],
                     ["3 (Junior Developer)", "3"],
-                    ["4", "4"],
-                    ["5", "5"],
-                    ["6", "6"],
+                    %w[4 4],
+                    %w[5 5],
+                    %w[6 6],
                     ["7 (Experienced Developer)", "7"],
-                    ["8", "8"],
-                    ["9", "9"],
+                    %w[8 8],
+                    %w[9 9],
                     ["10 (Senior Developer)", "10"]],
                    @user.experience_level,
                  ) %>
@@ -389,8 +390,8 @@
     <%= f.label :tabs_or_spaces, "Tabs or spaces" %><br>
     <%= f.select :tabs_or_spaces,
                  options_for_select(
-                   [["Tabs", "tabs"],
-                    ["Spaces", "spaces"]],
+                   [%w[Tabs tabs],
+                    %w[Spaces spaces]],
                    @user.tabs_or_spaces,
                  ) %>
 
diff --git a/app/views/internal/tags/index.html.erb b/app/views/internal/tags/index.html.erb
index 0c8d051ea..b12b1ae8f 100644
--- a/app/views/internal/tags/index.html.erb
+++ b/app/views/internal/tags/index.html.erb
@@ -1,4 +1,5 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
+  integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
 <style>
   textarea {
     height: 140px;
diff --git a/app/views/pages/generator.html.erb b/app/views/pages/generator.html.erb
index 8b80ec4d6..743207214 100644
--- a/app/views/pages/generator.html.erb
+++ b/app/views/pages/generator.html.erb
@@ -117,7 +117,8 @@
     <a class="second-slack" href="https://slack.com/oauth/authorize?scope=commands+bot+chat:write:bot+groups:write&client_id=3128000905.33373336070"><img alt="Add to Slack" height="40" width="139" src="https://platform.slack-edge.com/img/add_to_slack.png" srcset="https://platform.slack-edge.com/img/add_to_slack.png 1x, https://platform.slack-edge.com/img/add_to_slack@2x.png 2x"></a>
   </div>
 </div>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js"
+  integrity="sha256-YPasiZgoiQnua4XI64s7hGPvui/esv17eFQbmhMd+KU=" crossorigin="anonymous"></script>
 <script>
   $(".typing").typed({
     strings: ["/orly Making Your Own Parody Covers; Don’t even leave Slack to do it; Kanye West"],
diff --git a/app/views/tags/edit.html.erb b/app/views/tags/edit.html.erb
index 82669a219..9a82a6e33 100644
--- a/app/views/tags/edit.html.erb
+++ b/app/views/tags/edit.html.erb
@@ -1,4 +1,6 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
+  integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
+
 <style>
   .widget header {
     color: <%= HexComparer.new([@tag.bg_color_hex || "#0000000", @tag.text_color_hex || "#ffffff"]).brightness(0.8) %>
diff --git a/app/views/users/_org_admin.html.erb b/app/views/users/_org_admin.html.erb
index 2e642bf47..6e10d3f0a 100644
--- a/app/views/users/_org_admin.html.erb
+++ b/app/views/users/_org_admin.html.erb
@@ -1,4 +1,6 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
+  integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
+
 <style>
   .primary-sticky-nav-author, .primary-sticky-nav-author-element {
     border: 1px solid <%= HexComparer.new([user_colors(@organization)[:bg], user_colors(@organization)[:text]]).brightness(0.88) %> !important;
diff --git a/app/views/users/_org_non_member.html.erb b/app/views/users/_org_non_member.html.erb
index 892fc63c5..be0c36486 100644
--- a/app/views/users/_org_non_member.html.erb
+++ b/app/views/users/_org_non_member.html.erb
@@ -1,4 +1,6 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
+  integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
+
 <h3>Join An Organization</h3>
 <h5>Do you have the secret code?</h5>
 
diff --git a/app/views/users/_profile.html.erb b/app/views/users/_profile.html.erb
index 7b5517616..512ea748e 100644
--- a/app/views/users/_profile.html.erb
+++ b/app/views/users/_profile.html.erb
@@ -1,4 +1,6 @@
-<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js" async="async"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jscolor/2.0.4/jscolor.min.js"
+  integrity="sha256-CJWfUCeP3jLdUMVNUll6yQx37gh9AKmXTRxvRf7jzro=" crossorigin="anonymous"></script>
+
 <% unless @user.identities.exists?(provider: 'github') %>
   <div class="field">
     <a href="/users/auth/github" class="big-button cta" data-no-instant>
diff --git a/app/views/videos/new.html.erb b/app/views/videos/new.html.erb
index 28e7cb5e3..35ebfc7aa 100644
--- a/app/views/videos/new.html.erb
+++ b/app/views/videos/new.html.erb
@@ -17,7 +17,7 @@
                        key: "video-upload__#{SecureRandom.hex}",
                        key_starts_with: "video-upload__",
                        acl: "public-read",
-                       max_file_size: (current_user.has_role?(:super_admin) ? 20000 : 6000).megabytes,
+                       max_file_size: (current_user.has_role?(:super_admin) ? 20_000 : 6000).megabytes,
                        id: "s3-uploader",
                        class: "upload-form",
                        data: { key: :val } do %>
@@ -36,7 +36,8 @@
     </p>
   </div>
 </center>
-<script src="https://code.jquery.com/jquery-3.3.1.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"
+  integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
 <%= javascript_include_tag "s3_direct_upload" %>
 <script>
   setTimeout(function () {