You don't have to 'trust' my comment. China using the great firewall to infect Baidu javascript to attack github is a well-documented fact. You can even view

You don't have to 'trust' my comment. China using the great firewall to infect Baidu javascript to attack github is a well-documented fact. You can even view the infected Baidu javascript designed to attack GreatFire and cn-nytimes projects on github archived on github itself here: https://github.com/BenMQ/cbjs-baidu-github-attack https://github.com/BenMQ/cbjs-baidu-github-attack Happily the Chinese government let the Baidu javascript work as intended for Chinese users, it was only for international users that they converted it into malware. Bottom line, don't load any javascript file hosted in mainland China. If the the US government forced all traffic through a single firewall and used said firewall to infect Google Analytics javascript files on third party websites to force international users to unwittingly engage in a DDoS against a Chinese site that was hosting open source code designed to allow US citizens to get around the 'great US firewall', I'd be advising folks against trusting Google Analytics and US-hosted javascript the way I advise them against trusting Baidu analytics and China-hosted javascript now.