diff --git a/demo/index.html b/demo/index.html
index 59c8d70..3dd487e 100644
--- a/demo/index.html
+++ b/demo/index.html
@@ -21,7 +21,7 @@
 <html>
 <head>
 <title>OpenSlide Demo</title>
-<link rel="stylesheet" type="text/css" media="all" href="demo.css">
+<link rel="stylesheet" media="all" href="demo.css">
 <meta name="viewport" content="user-scalable=no">
 </head>
 
@@ -59,12 +59,12 @@
     <div id="details" class="scroll-parent"></div>
 </div>
 
-<script type="text/javascript" src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
-<script type="text/javascript" src="https://cdn.jsdelivr.net/npm/openseadragon@5.0.1/build/openseadragon/openseadragon.min.js"></script>
-<script type="text/javascript" src="openseadragon-scalebar.js"></script>
-<script type="text/javascript">
+<script src="https://code.jquery.com/jquery-4.0.0.min.js" integrity="sha256-OaVG6prZf4v69dPg6PhVattBXkcOWQB62pdZ3ORyrao=" crossorigin="anonymous"></script>
+<script src="https://cdn.jsdelivr.net/npm/openseadragon@6.0/build/openseadragon/openseadragon.min.js" integrity="sha256-v9eBY4fslDaGqbMjKILsvEHHvHAApDJnzvMtd1AHl98=" crossorigin="anonymous"></script>
+<script src="openseadragon-scalebar.js"></script>
+<script>
 $(function() {
-    var openseadragon_images = "https://cdn.jsdelivr.net/npm/openseadragon@5.0.1/build/openseadragon/images/"
+    var openseadragon_images = "https://cdn.jsdelivr.net/npm/openseadragon@6.0/build/openseadragon/images/"
     var storage = "https://openslide-demo-site.s3.dualstack.us-east-2.amazonaws.com/"
 
     var stamp;
@@ -86,7 +86,6 @@
         status_skipped = false;
         $.ajax({
             'dataType': 'json',
-            'jsonp': false,  // use CORS
             'success': function(data, status, xhr) {
                 if (data.stamp && data.stamp !== stamp) {
                     // retiled existing slides, so reload page
@@ -217,7 +216,6 @@
             $("#details").html('').addClass('loading');
             $.ajax({
                 'dataType': 'json',
-                'jsonp': false,  // use CORS
                 'success': function(data, status, xhr) {
                     populate_details(slide, data);
                 },
@@ -242,6 +240,7 @@
             viewer = new OpenSeadragon({
                 id: "view",
                 prefixUrl: openseadragon_images,
+                crossOriginPolicy: "anonymous",
                 animationTime: 0.5,
                 blendTime: 0.1,
                 constrainDuringPan: true,
@@ -281,7 +280,6 @@
 
     $.ajax({
         'dataType': 'json',
-        'jsonp': false,  // use CORS
         'success': populate_images,
         'error': function() {
             $('#images').removeClass('loading').
