Agreed. Even subresource integrity [1] does not help here, because if the HTML is compromised, then everything else can be too. [1] https://developer.mozilla.o

Agreed. Even subresource integrity [1] does not help here, because if the HTML is compromised, then everything else can be too. [1] https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...