Merge pull request 'Fix codebase audit findings: bugs, security, perf, content' (#3) from fix-audit-findings into main

Reviewed-on: #3

static/admin/config.yml

@@ -23,7 +23,7 @@ media_folder: "assets/uploaded/img"
 public_folder: "/uploaded/img"
 
 ## SiteTitle
-site_url: htpps://blog.ahmza.com
+site_url: https://blog.ahmza.com
 display_url: blog.ahmza.com
 logo_url: https://blog.ahmza.com/logo.webp
 

static/admin/index.html

@@ -8,7 +8,13 @@
     <!-- Include the script that enables Netlify Identity on this page. -->
   </head>
   <body>
-    <!-- Include the script that builds the page and powers Decap CMS -->
-    <script src="https://unpkg.com/@sveltia/cms/dist/sveltia-cms.js"></script>
+    <!-- Sveltia CMS, pinned to a specific version with Subresource Integrity.
+         Bump the version + regenerate the integrity hash when upgrading:
+         curl -sS https://cdn.jsdelivr.net/npm/@sveltia/cms@<ver>/dist/sveltia-cms.js \
+           | openssl dgst -sha384 -binary | openssl base64 -A -->
+    <script
+      src="https://cdn.jsdelivr.net/npm/@sveltia/cms@0.172.4/dist/sveltia-cms.js"
+      integrity="sha384-Sj4Mfbg9OjjwG2ZE/YeUYu7xbZRTXGFg/wa/nszj3KzItKuRLEmGqSpV5C9YI2Ge"
+      crossorigin="anonymous"></script>
   </body>
 </html>