> However I am a little concerned with adding a script from another website... it requires a lot of trust, doesn'it? Not if you use the `integrity` attribute l

> However I am a little concerned with adding a script from another website... it requires a lot of trust, doesn'it? Not if you use the `integrity` attribute like the page recommends. If the file hash doesn't match the one given in the tag, the browser won't run the script. https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...