don't use CDN's for most things. Get rid of JsDelivr.net from CSP as well.

Overlord-Server/public/assets/ansi.js

@@ -1,4 +1,4 @@
-import AnsiToHtml from "https://cdn.jsdelivr.net/npm/ansi-to-html@0.7.2/+esm";
+import AnsiToHtml from "/vendor/ansi-to-html/ansi-to-html.esm.js";
 
 const converter = new AnsiToHtml({ newline: true, escapeHtml: true });
 

Overlord-Server/public/assets/metrics.js

@@ -6,8 +6,7 @@ let countryCounts = {};
 let maxCountryCount = 0;
 let latestByCountry = {};
 
-const GEOJSON_URL =
-  "https://cdn.jsdelivr.net/gh/datasets/geo-countries@master/data/countries.geojson";
+const GEOJSON_URL = "/vendor/geo-countries/countries.geojson";
 
 if (typeof Chart !== "undefined") {
   Chart.defaults.color = "#cbd5e1";

Overlord-Server/public/assets/notify-client.js

@@ -330,7 +330,7 @@ function ensureMsgpackrLoaded() {
   if (msgpackLoadPromise) return msgpackLoadPromise;
   msgpackLoadPromise = new Promise((resolve, reject) => {
     const script = document.createElement("script");
-    script.src = "https://cdn.jsdelivr.net/npm/msgpackr@1.11.8/dist/index.js";
+    script.src = "/vendor/msgpackr/msgpackr.js";
     script.async = true;
     script.onload = () => resolve();
     script.onerror = (err) => reject(err);