From 35c258f0869395d9d8e739189cc55fd82c226a2a Mon Sep 17 00:00:00 2001
From: Ardis Lu <ardisglu@gmail.com>
Date: Sat, 16 Dec 2023 22:01:52 -0800
Subject: [PATCH] Enforce CORS rules and restrict client-side data sent to CDN

---
 demo/index.html | 6 +++---
 sidebar.html    | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/demo/index.html b/demo/index.html
index a7afb06..58e8561 100644
--- a/demo/index.html
+++ b/demo/index.html
@@ -222,9 +222,9 @@ LIMIT 25</textarea>
   </main>
 
   <!-- Load CodeMirror and sql.js -->
-  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/lib/codemirror.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/mode/sql/sql.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.9.0/dist/sql-wasm.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/lib/codemirror.min.js" crossorigin></script>
+  <script src="https://cdn.jsdelivr.net/npm/codemirror@5.65.16/mode/sql/sql.min.js" crossorigin></script>
+  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.9.0/dist/sql-wasm.js" crossorigin></script>
 
   <script>
     /** Helper functions to handle SQL execution and output */
diff --git a/sidebar.html b/sidebar.html
index d65cbba..d1f0214 100644
--- a/sidebar.html
+++ b/sidebar.html
@@ -48,7 +48,7 @@
 
   <p class="bottom gray">https://github.com/ardislu/sheets-db</p>
 
-  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.8.0/dist/sql-wasm.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/sql.js@1.8.0/dist/sql-wasm.js" crossorigin></script>
   <script>
     // Globals for SQLite which will be overwritten later
     let SQL; // the sql.js instance
-- 
2.47.3