Add integrity check for remote resource (#3348)

davel · HackbrettXXX · web-flow · commit a5f8fc97f4b3 · 2022-01-21T10:15:30.000+01:00
Co-authored-by: Lukas Holländer &lt;lukas.hollaender@yworks.com&gt;
diff --git a/src/jspdf.js b/src/jspdf.js
@@ -3093,13 +3093,22 @@ function jsPDF(options) {
           Object.prototype.toString.call(globalObject) === "[object Window]"
         ) {
           var pdfObjectUrl =
-            options.pdfObjectUrl ||
             "https://cdnjs.cloudflare.com/ajax/libs/pdfobject/2.1.1/pdfobject.min.js";
+          var integrity =
+            ' integrity="sha512-4ze/a9/4jqu+tX9dfOqJYSvyYd5M6qum/3HpCLr+/Jqf0whc37VUbkpNGHR7/8pSnCFw47T1fmIpwBV7UySh3g==" crossorigin="anonymous"';
+
+          if (options.pdfObjectUrl) {
+            pdfObjectUrl = options.pdfObjectUrl;
+            integrity = "";
+          }
+
           var htmlForNewWindow =
             "<html>" +
             '<style>html, body { padding: 0; margin: 0; } iframe { width: 100%; height: 100%; border: 0;}  </style><body><script src="' +
             pdfObjectUrl +
-            '"></script><script >PDFObject.embed("' +
+            '"' +
+            integrity +
+            '></script><script >PDFObject.embed("' +
             this.output("dataurlstring") +
             '", ' +
             JSON.stringify(options) +
