From 576187298872ccf1b13b654f4b42e1d7d7e6f1ec Mon Sep 17 00:00:00 2001
From: Matthew Knight <mattnite@proton.me>
Date: Tue, 17 Feb 2026 16:12:25 -0800
Subject: [PATCH] Pin Mermaid.js version with SRI integrity hash

Fixes #27
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 web/templates/layouts/base.html | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/web/templates/layouts/base.html b/web/templates/layouts/base.html
index debf7f3..d22cc0a 100644
--- a/web/templates/layouts/base.html
+++ b/web/templates/layouts/base.html
@@ -15,11 +15,17 @@
         </main>
     </div>
     <span class="hidden ring-blue-400 bg-blue-50 border-blue-400 hover:text-red-500"></span>
-    <script type="module">
+    <script>
       if (document.querySelector('pre.mermaid')) {
-        const { default: mermaid } = await import('https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs');
-        mermaid.initialize({ startOnLoad: false, theme: 'default' });
-        await mermaid.run();
+        var s = document.createElement('script');
+        s.src = 'https://cdn.jsdelivr.net/npm/mermaid@11.4.1/dist/mermaid.min.js';
+        s.integrity = 'sha384-rbtjAdnIQE/aQJGEgXrVUlMibdfTSa4PQju4HDhN3sR2PmaKFzhEafuePsl9H/9I';
+        s.crossOrigin = 'anonymous';
+        s.onload = function() {
+          mermaid.initialize({ startOnLoad: false, theme: 'default' });
+          mermaid.run();
+        };
+        document.body.appendChild(s);
       }
     </script>
 </body>