Enforce CORS rules and restrict client-side data sent to CDN

diff --git a/demo/index.html b/demo/index.html
index a7afb06991f188d7409da9de59947988b6ccf628..58e85616ed5db49ae4b57bbc8146dd62aa751f32 100644 (file)
--- a/demo/index.html
+++ b/demo/index.html
@@ -222,9 +222,9 @@ LIMIT 25</textarea>
   </main>
 
   <!-- Load CodeMirror and sql.js -->
-  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/lib/codemirror.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/mode/sql/sql.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.9.0/dist/sql-wasm.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/lib/codemirror.min.js" crossorigin></script>
+  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/mode/sql/sql.min.js" crossorigin></script>
+  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.9.0/dist/sql-wasm.js" crossorigin></script>
 
   <script>
     /** Helper functions to handle SQL execution and output */

diff --git a/sidebar.html b/sidebar.html
index d65cbba98612e68e9aec4bb6e1b643394c83b9c2..d1f0214b46f7d0cfb3d7ffde59e4f3e07f479e5b 100644 (file)
--- a/sidebar.html
+++ b/sidebar.html
@@ -48,7 +48,7 @@
 
   <p class="bottom gray">https://github.com/ardislu/sheets-db</p>
 
-  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.8.0/dist/sql-wasm.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.8.0/dist/sql-wasm.js" crossorigin></script>
   <script>
     // Globals for SQLite which will be overwritten later
     let SQL; // the sql.js instance