3 ms·

Yes, the server signing its scripts would do it, provided the server doesn't blindly sign attacker-submitted code. Some servers might...