Fix stats pages for CSP compat and update nvd3/d3

app/config/config_prod.yml

@@ -92,6 +92,7 @@ nelmio_security:
             style-src:
                 - 'self'
                 - 'unsafe-inline'
+                - 'https://cdn.jsdelivr.net/'
                 - 'https://fonts.googleapis.com/'
             font-src:
                 - 'self'

src/Packagist/WebBundle/Resources/views/Package/stats.html.twig

@@ -68,12 +68,12 @@
 {% endblock %}
 
 {% block stylesheets %}
-    <link href="https://cdn.rawgit.com/novus/nvd3/v1.7.1/build/nv.d3.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.css" rel="stylesheet">
 {% endblock %}
 
 {% block scripts %}
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/d3/3.5.5/d3.min.js"></script>
-    <script src="https://cdn.rawgit.com/novus/nvd3/v1.7.1/build/nv.d3.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/d3@3.5.17/d3.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.js"></script>
     <script src="{{ asset('bundles/packagistweb/js/charts.js') }}"></script>
     <script>
         (function () {

src/Packagist/WebBundle/Resources/views/Web/stats.html.twig

@@ -52,11 +52,11 @@
 {% endblock %}
 
 {% block stylesheets %}
-    <link href="https://cdn.rawgit.com/novus/nvd3/v1.7.1/build/nv.d3.css" rel="stylesheet">
+    <link href="https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.css" rel="stylesheet">
 {% endblock %}
 
 {% block scripts %}
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/d3/3.5.5/d3.min.js"></script>
-    <script src="https://cdn.rawgit.com/novus/nvd3/v1.7.1/build/nv.d3.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/d3@3.5.17/d3.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.js"></script>
     <script src="{{ asset('bundles/packagistweb/js/charts.js') }}"></script>
 {% endblock %}