added integrity verifications for all sources in JSPs

pastore99 · Jan 19, 2024 · 86be584 · 86be584
1 parent b5082a7
commit 86be584
Show file tree

Hide file tree

Showing 8 changed files with 9 additions and 16 deletions.
diff --git a/src/main/webapp/JSP/changePassw.jsp b/src/main/webapp/JSP/changePassw.jsp
@@ -4,7 +4,7 @@
     <link rel="icon" href="../images/siteIco.png" type="image/png">
     <title>TalkAId - Cambio Password</title>
     <link href="../CSS/Change_Password.css" type="text/css" rel = "stylesheet">
-    <script src="https://code.jquery.com/jquery-3.6.4.min.js"></script>
+    <script src="https://code.jquery.com/jquery-3.6.4.min.js" integrity="sha384-UG8ao2jwOWB7/oDdObZc6ItJmwUkR/PfMyt9Qs5AwX7PsnYn1CRKCTWyncPTWvaS" crossorigin="anonymous"></script>
 
     <script>
         $(document).ready(function() {

diff --git a/src/main/webapp/JSP/homePagePatient.jsp b/src/main/webapp/JSP/homePagePatient.jsp
@@ -143,7 +143,7 @@
 
 
 
-<script src="https://code.jquery.com/jquery-3.6.4.min.js"></script>
+<script src="https://code.jquery.com/jquery-3.6.4.min.js" integrity="sha384-UG8ao2jwOWB7/oDdObZc6ItJmwUkR/PfMyt9Qs5AwX7PsnYn1CRKCTWyncPTWvaS" crossorigin="anonymous"></script>
 <script>
     function goReport() {
         window.location.href = "patientReport.jsp";

diff --git a/src/main/webapp/JSP/legal.jsp b/src/main/webapp/JSP/legal.jsp
@@ -280,7 +280,7 @@
         </div>
         <button class="button" type="submit">Salva</button>
     </form>
-    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous"></script>
     <script src="../JS/legal.js"></script>
 </body>
 </html>
diff --git a/src/main/webapp/JSP/messageCenter.jsp b/src/main/webapp/JSP/messageCenter.jsp
@@ -1,7 +1,5 @@
 <%@ page import="model.service.message.MessageManager" %>
 <%@ page import="java.util.List" %>
-<%@ page import="model.service.user.UserData" %>
-<%@ page import="model.entity.User" %>
 <%@ page import="model.service.user.UserRegistry" %>
 <%@ page import="model.entity.PersonalInfo" %>
 <%@ page import="model.service.message.MessageManager" %>
@@ -13,8 +11,8 @@
     <meta charset="UTF-8">
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <script src="https://kit.fontawesome.com/391827d54c.js" crossorigin="anonymous"></script>
-    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
+    <script src="https://kit.fontawesome.com/391827d54c.js" integrity="sha384-5xvj0M3Gh9Pb/mS3SIFJbKoo1xTVykyLGBYlelYdprRFdK8AUUOJeH7RN3ZQHKkW" crossorigin="anonymous"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous"></script>
     <script src="../JS/message.js"></script>
     <link rel="stylesheet" href="../CSS/messageCenter.css">
     <title>TalkAId - Centro Messaggi</title>

diff --git a/src/main/webapp/JSP/patientReport.jsp b/src/main/webapp/JSP/patientReport.jsp
@@ -1,7 +1,5 @@
 <%@ page import="model.service.exercise.ExerciseManager" %>
-<%@ page import="model.entity.Exercise" %>
 <%@ page import="java.util.List" %>
-<%@ page import="model.entity.ExerciseGlossary" %>
 <%@ page import="model.entity.SlimmerExercise" %>
 <!DOCTYPE html>
 <html lang="it" style="background-color: #f7fcff; ">
@@ -18,7 +16,7 @@
     <%@page contentType="text/html;charset=UTF-8"%>
     <meta charset="utf-8" />
     <link rel="stylesheet" href="../CSS/homepagepatient.css" />
-    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous"></script>
     <title>TalkAId - I tuoi risultati</title>
 </head>
 <body>

diff --git a/src/main/webapp/JSP/userArea.jsp b/src/main/webapp/JSP/userArea.jsp
@@ -10,7 +10,7 @@
     <title>TalkAId - User Area</title>
     <link rel="icon" href="../images/siteIco.png" type="image/png">
     <meta name="viewport" content="width=device-width, initial-scale=1">
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" integrity="sha384-r4NyP46KrjDleawBgD5tp8Y7UzmLA05oM1iAEQ17CSuDqnUK2+k9luXQOfXJCJ4I" crossorigin="anonymous">
     <link href="../CSS/dettagliUser.css" rel="stylesheet">
     <link href="#" rel="stylesheet">
 </head>

diff --git a/src/main/webapp/JSP/userReport.jsp b/src/main/webapp/JSP/userReport.jsp
@@ -1,7 +1,4 @@
 <%@ page import="model.service.exercise.ExerciseManager" %>
-<%@ page import="model.entity.Exercise" %>
-<%@ page import="java.util.List" %>
-<%@ page import="model.entity.ExerciseGlossary" %>
 <%@ page import="java.util.Map" %>
 <!DOCTYPE html>
 <html lang="it" style="background-color: #f7fcff; ">
@@ -19,7 +16,7 @@
     <%@page contentType="text/html;charset=UTF-8"%>
     <meta charset="utf-8" />
     <link href="../CSS/userReport.css" type="text/css" rel = "stylesheet">
-    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous"></script>
 
 </head>
 <body>

diff --git a/src/main/webapp/JSP/viewPatientInfo.jsp b/src/main/webapp/JSP/viewPatientInfo.jsp
@@ -8,7 +8,7 @@
 <!DOCTYPE html>
 <html>
 <head>
-    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/chart.js" integrity="sha384-9nhczxUqK87bcKHh20fSQcTGD4qq5GhayNYSYWqwBkINBhOfQLg/P5HG5lF1urn4" crossorigin="anonymous"></script>
     <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js" integrity="sha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2" crossorigin="anonymous"></script>
     <link rel="stylesheet" href="../CSS/homepageTherapist.css" />
     <link rel="stylesheet" href="../CSS/viewPatientInfo.css" />