diff --git a/calc_sri_fix.sh b/calc_sri_fix.sh
old mode 100755
new mode 100644
index e71fa62f..cfc47292
--- a/calc_sri_fix.sh
+++ b/calc_sri_fix.sh
@@ -2,21 +2,21 @@
 
 set -euo pipefail
 
+# calculate_sri downloads the given URL, computes the SHA-384 SRI hash of its content (base64) and echoes a line "<url> sha384-<base64_hash>".
 calculate_sri() {
     url="$1"
     temp_file=$(mktemp)
+    trap 'rm -f "$temp_file"' RETURN
 
     # curl options: -f (fail on HTTP error), -S (show error), -s (silent equivalent), -L (follow redirects)
     if ! curl -fS -sL "$url" -o "$temp_file"; then
         echo "Error downloading $url" >&2
-        rm -f "$temp_file"
         return 1
     fi
 
     # Check for empty response
     if [ ! -s "$temp_file" ]; then
         echo "Error: Empty response from $url" >&2
-        rm -f "$temp_file"
         return 1
     fi
 
@@ -26,4 +26,4 @@ calculate_sri() {
 }
 
 calculate_sri "https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/plugins/line-numbers/prism-line-numbers.min.js"
-calculate_sri "https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/plugins/toolbar/prism-toolbar.min.js"
+calculate_sri "https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/plugins/toolbar/prism-toolbar.min.js"
\ No newline at end of file