From c9300c0612962c7fda4b8a8035020d43b96d87e2 Mon Sep 17 00:00:00 2001
From: Mike Benner <36419818+mikebenner@users.noreply.github.com>
Date: Wed, 4 Nov 2026 10:02:51 -0800
Subject: [PATCH] Pin leaflet.heat to 0.2.0 on master (#188)

Backport PR #188 to master, applying the map change to templates/map.html. Pin the compatible classic-script release and verify its contents with SRI.
---
 meshview/static/heatmap.html | 4 +++-
 meshview/templates/map.html  | 4 +++-
 meshview/templates/node.html | 4 +++-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/meshview/static/heatmap.html b/meshview/static/heatmap.html
index c3135e2..0546bb5 100644
--- a/meshview/static/heatmap.html
+++ b/meshview/static/heatmap.html
@@ -25,7 +25,9 @@
 <div id="legend"></div>
 
 <script src="https://unpkg.com/leaflet@1.9.4/dist/leaflet.js"></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script>
 const map = L.map("map");
 L.tileLayer("https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png", {
diff --git a/meshview/templates/map.html b/meshview/templates/map.html
index d92eab0..e41a2d9 100644
--- a/meshview/templates/map.html
+++ b/meshview/templates/map.html
@@ -177,7 +177,9 @@
 <script src="https://unpkg.com/leaflet-polylinedecorator@1.6.0/dist/leaflet.polylinedecorator.js"
         integrity="sha384-FhPn/2P/fJGhQLeNWDn9B/2Gml2bPOrKJwFqJXgR3xOPYxWg5mYQ5XZdhUSugZT0"
         crossorigin></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script src="/static/portmaps.js"></script>
 
 <script>
diff --git a/meshview/templates/node.html b/meshview/templates/node.html
index eccc758..a87db48 100644
--- a/meshview/templates/node.html
+++ b/meshview/templates/node.html
@@ -496,7 +496,9 @@
 
 <script src="https://cdn.jsdelivr.net/npm/echarts@5.5.0/dist/echarts.min.js"></script>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/qrcodejs/1.0.0/qrcode.min.js"></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script src="/static/portmaps.js"></script>
 
 <script>