From 4e1a43ce72c52c0ec50c3e0347af62e4ce9823cf Mon Sep 17 00:00:00 2001
From: Mercury233 <me@mercury233.me>
Date: Sat, 29 Jun 2024 08:14:37 +0800
Subject: [PATCH 1/3] Update frontend.md

---
 docs/frontend.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/docs/frontend.md b/docs/frontend.md
index fbd9f0286..82f3929c2 100644
--- a/docs/frontend.md
+++ b/docs/frontend.md
@@ -111,9 +111,7 @@ twikoo.init({
 
 如果遇到默认 CDN 加载速度缓慢，可更换其他 CDN 镜像。以下为可供选择的公共 CDN，其中一些 CDN 可能需要数天时间同步最新版本：
 
-* `https://cdn.staticfile.net/twikoo/1.6.36/twikoo.all.min.js`
 * `https://lib.baomitu.com/twikoo/1.6.36/twikoo.all.min.js`
-* `https://cdn.bootcdn.net/ajax/libs/twikoo/1.6.36/twikoo.all.min.js`
 * `https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.all.min.js`
 
 ## 开启管理面板（腾讯云环境）

From 9bf40487bd841a3b87c6b7ab42f9c172c0b27711 Mon Sep 17 00:00:00 2001
From: Mercury233 <me@mercury233.me>
Date: Sat, 29 Jun 2024 08:17:49 +0800
Subject: [PATCH 2/3] Update frontend.md

---
 docs/frontend.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/frontend.md b/docs/frontend.md
index 82f3929c2..04f0ac22e 100644
--- a/docs/frontend.md
+++ b/docs/frontend.md
@@ -93,7 +93,7 @@ twikoo:
 
 ``` html
 <div id="tcomment"></div>
-<script src="https://cdn.staticfile.net/twikoo/1.6.36/twikoo.all.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.all.min.js"></script>
 <script>
 twikoo.init({
   envId: '您的环境id', // 腾讯云环境填 envId；Vercel 环境填地址（https://xxx.vercel.app）

From 470e94955ee0f317173f1696695c10f6c0b3302b Mon Sep 17 00:00:00 2001
From: mercury233 <me@mercury233.me>
Date: Sat, 29 Jun 2024 09:46:51 +0800
Subject: [PATCH 3/3] add SRI

---
 demo/demo.html                   | 2 +-
 docs/.vitepress/theme/Twikoo.vue | 6 +++---
 docs/frontend.md                 | 4 +++-
 src/client/utils/highlight.js    | 2 +-
 4 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/demo/demo.html b/demo/demo.html
index 53c7e5884..18b136427 100644
--- a/demo/demo.html
+++ b/demo/demo.html
@@ -5,7 +5,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no">
   <title>Twikoo Demo</title>
-  <link rel="stylesheet" type="text/css" href="https://cdn.staticfile.net/bulma/0.8.2/css/bulma.min.css">
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.2/css/bulma.min.css" integrity="sha384-ot6RguV46OXVI/scORL3MF0W76aCi4XLFeX3mRArMs/+rNzCpVaOFDtfitKy47nn" crossorigin="anonymous">
   <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/katex.min.css" integrity="sha384-AfEj0r4/OFrOo5t7NnNe46zW/tFgW6x/bCJG8FqQCEo3+Aro6EYUG4+cU+KJWu/X" crossorigin="anonymous">
   <link rel="stylesheet" type="text/css" href="demo.css">
 </head>
diff --git a/docs/.vitepress/theme/Twikoo.vue b/docs/.vitepress/theme/Twikoo.vue
index 2bac47f18..800045a36 100644
--- a/docs/.vitepress/theme/Twikoo.vue
+++ b/docs/.vitepress/theme/Twikoo.vue
@@ -68,11 +68,11 @@ onMounted(() => {
     <component :is="'script'" defer src="https://cdn.jsdelivr.net/npm/katex@0.12.0/dist/contrib/auto-render.min.js" integrity="sha384-mll67QQFJfxn0IYznZYonOWZ644AWYC+Pt2cHqMaRhXVrursRwvLnLaebdGIlYNa" crossorigin="anonymous"></component>
 
     <!-- lightGallery -->
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/lightgallery@2.1.8/css/lightgallery.css">
-    <component :is="'script'" src="https://cdn.jsdelivr.net/npm/lightgallery@2.1.8/lightgallery.min.js"></component>
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/lightgallery@2.1.8/css/lightgallery.css" integrity="sha384-U8ohOXEVyF0NGY2LQnH83V4wGxOmFhim4U5xhfE/WDCHdPO2iUKPPYkhpDl9U/Yf" crossorigin="anonymous">
+    <component :is="'script'" src="https://cdn.jsdelivr.net/npm/lightgallery@2.1.8/lightgallery.min.js" integrity="sha384-l5lFB9srHFAyvfCoHya9X1JwGGTNPvDtikieqZp7qu/bomCw0e0+yoyiL0f7UXLD" crossorigin="anonymous"></component>
 
     <!-- Twikoo -->
     <div id="twikoo"></div>
-    <component :is="'script'" src="https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.min.js" ref="twikooJs"></component>
+    <component :is="'script'" src="https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.min.js" integrity="sha384-ocJyLUeo5I91x224iE/ke7PPHyXVSUKNL7GfqnEto/HxGuBLnLLlitt3dFT/Zwrn" crossorigin="anonymous" ref="twikooJs"></component>
   </div>
 </template>
diff --git a/docs/frontend.md b/docs/frontend.md
index 04f0ac22e..8fc944396 100644
--- a/docs/frontend.md
+++ b/docs/frontend.md
@@ -93,7 +93,7 @@ twikoo:
 
 ``` html
 <div id="tcomment"></div>
-<script src="https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.all.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.all.min.js" integrity="sha384-4KfOjEinLSkv1i1J8TzlkC/RTnuiLoR1OLerVgjEKoH5djYtbf7mzEFsz9p3nfuA" crossorigin="anonymous"></script>
 <script>
 twikoo.init({
   envId: '您的环境id', // 腾讯云环境填 envId；Vercel 环境填地址（https://xxx.vercel.app）
@@ -114,6 +114,8 @@ twikoo.init({
 * `https://lib.baomitu.com/twikoo/1.6.36/twikoo.all.min.js`
 * `https://cdn.jsdelivr.net/npm/twikoo@1.6.36/dist/twikoo.all.min.js`
 
+> 建议使用 CDN 引入 Twikoo 的用户参考上一段的示例在代码中加入 [SRI](https://developer.mozilla.org/zh-CN/docs/Web/Security/Subresource_Integrity) 属性以确保完整性。
+
 ## 开启管理面板（腾讯云环境）
 
 1. 进入[环境-登录授权](https://console.cloud.tencent.com/tcb/env/login)，点击“自定义登录”右边的“私钥下载”，下载私钥文件
diff --git a/src/client/utils/highlight.js b/src/client/utils/highlight.js
index 265d9df6c..91e7c9285 100644
--- a/src/client/utils/highlight.js
+++ b/src/client/utils/highlight.js
@@ -1,6 +1,6 @@
 import { app } from '../view'
 
-const PRISM_CDN = 'https://cdn.staticfile.net/prism/1.28.0'
+const PRISM_CDN = 'https://cdn.jsdelivr.net/npm/prismjs@1.28.0'
 let Prism
 let cssEl