diff options
| author | Craig Jennings <c@cjennings.net> | 2026-06-30 17:25:50 -0400 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-06-30 17:25:50 -0400 |
| commit | 6660b0dc2a6e32aa4c4aec910a6a08bf8bb1e807 (patch) | |
| tree | 0e3f47b6194e426a0ab24f38579f1649f0ca79bf /scripts/theme-studio/browser-gates.js | |
| parent | 0338c7b2504616e1b89ac21a4e1b5e460a42fec6 (diff) | |
| download | dotemacs-6660b0dc2a6e32aa4c4aec910a6a08bf8bb1e807.tar.gz dotemacs-6660b0dc2a6e32aa4c4aec910a6a08bf8bb1e807.zip | |
fix(markdown): vendor strapdown.js instead of a plain-HTTP CDN
The live markdown preview pulled strapdown.js from http://ndossougbe.github.io over plain HTTP. That broke the preview with no network, loaded third-party JS over an unencrypted connection (mixed content, MITM), and trusted an unmaintained github.io page against the localhost preview.
I vendored the self-contained bundle (jQuery, marked, bootstrap themes) into assets/strapdown.js and embed it inline. The whole preview now serves from localhost and works offline. cj/markdown-html reads the file once and caches it.
Diffstat (limited to 'scripts/theme-studio/browser-gates.js')
0 files changed, 0 insertions, 0 deletions
