Add SRI checks to dependencies

Requires manual refresh if CDN re-bundles dependency

diff --git a/index.html b/index.html
index 4d37288048e423870f5f4fbb2f2790d3717de072..59df1205675af735116b1fc726907c5c75181aa8 100644 (file)
--- a/index.html
+++ b/index.html
@@ -83,10 +83,10 @@
     }
   }
   </script>
-  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/build/three.module.min.js">
-  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/controls/OrbitControls.min.js">
-  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/loaders/FontLoader.min.js">
-  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/geometries/TextGeometry.min.js">
+  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/build/three.module.min.js" integrity="sha512-QbgvOagVq2O5Ompxc2TOWKYQnJ1e+Y0JbTUQD9l2tUUtbdCWDqa7WA4REFVlSuFwWQmJLGtE+nW0EJMlmOx2RQ==" crossorigin>
+  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/controls/OrbitControls.min.js" integrity="sha512-CkrdJd/BAXdWcqEvZrAxVvmNqLgOOr4ghdBVBL69zjgby7EPPO1wowjhruHHsLV6KZm3JK9PlAbkQ7SqU5c22Q==" crossorigin>
+  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/loaders/FontLoader.min.js" integrity="sha512-JrlX2zn1OB59jFi+TT9ScvQ3D0awrgpoX6kFPO5IKqwvjkS5MbLlEBIoQD+QvQLNHCZq3ky9MfCH0eUrUczk8w==" crossorigin>
+  <link rel="modulepreload" href="https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/geometries/TextGeometry.min.js" integrity="sha512-/BK90NZ3okdaYlNSMqlTRdMEg/VgKQqn4T+bReUvlWaD6YYjX7cFNgBEf6OlstoinpwL+HFNF9XpekwyEJSGRw==" crossorigin>
 
   <script type="module">
     // Importing three.js from direct CDN URL is broken after v0.127.0. Instead, importmap is required.