don't use CDN's for most things. Get rid of JsDelivr.net from CSP as well.

2026-04-18 21:16:29 -05:00
parent 1ee4ae96d5
commit 4cc1f47822
43 changed files with 1339 additions and 423 deletions
@@ -330,7 +330,7 @@ function ensureMsgpackrLoaded() {
  if (msgpackLoadPromise) return msgpackLoadPromise;
  msgpackLoadPromise = new Promise((resolve, reject) => {
    const script = document.createElement("script");
-    script.src = "https://cdn.jsdelivr.net/npm/msgpackr@1.11.8/dist/index.js";
+    script.src = "/vendor/msgpackr/msgpackr.js";
    script.async = true;
    script.onload = () => resolve();
    script.onerror = (err) => reject(err);