We're talking about a html file that's basically: <html> <script src=example.cdn/app.js (SRI hash) /> </html> If your app.js go including unknown fo

We're talking about a html file that's basically: <html> <script src=example.cdn/app.js (SRI hash) /> </html> If your app.js go including unknown fonts and js etc... Then, yeah, you've got problems.