diff --git a/inventory-app/templates/base.html b/inventory-app/templates/base.html
index 5b17469..2023059 100644
--- a/inventory-app/templates/base.html
+++ b/inventory-app/templates/base.html
@@ -1,8 +1,8 @@
 <html>
   <head>
-    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
+    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet"> <!-- Can't SRI, different browsers get different files. Accepting risk to trust Google. If somebody has more time, Fonts could be made local as well, or better yet, use browser-given ones. -->
     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>  <!-- ompiled and minified CSS -->
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css" integrity="sha384-5KZdSYqynSzIjQGS2M1O3HW6HVDBjfNx0v5Y2eQuE3vvQ9NTiiPK9/GWc0yYCrgw" crossorigin="anonymous">
 <style>
 {% if devenv %}
 body {
@@ -75,7 +75,11 @@ span.tooltipped {
       src="https://code.jquery.com/jquery-3.5.1.min.js"
       integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0="
       crossorigin="anonymous"></script>
-    <script src="//timeago.yarp.com/jquery.timeago.js" type="text/javascript"></script>
+    <script
+      src="https://timeago.yarp.com/jquery.timeago.js"
+      integrity="sha384-h6POgrs4MJuD/CU6mCKr78tlR+4hBkhPmMfKR6GOvZdIxbgtXD6EF0OpACuC5CGM"
+      crossorigin="anonymous"
+      type="text/javascript"></script>
     <nav>
       <div class="nav-wrapper">
         <a href="#" data-target="mobile-demo" class="sidenav-trigger"><i class="material-icons">menu</i></a>
@@ -91,7 +95,7 @@ span.tooltipped {
     {% block content %}
     {% endblock %}
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js" integrity="sha384-ZOED+d9HxogEQwD+jFvux96iGQR9TxfJO+mPF2ZS0TuKH6eWrmvPsDpO6I0OWdiX" crossorigin="anonymous"></script>
     <script type="text/javascript">
       document.addEventListener('DOMContentLoaded', function() {
         $("time.timeago").timeago();
