You can verify signatures of JS and CSS files to make sure they are only loaded if they are exactly what you expect them to be by using the "integrity" paramete

You can verify signatures of JS and CSS files to make sure they are only loaded if they are exactly what you expect them to be by using the "integrity" parameter, see https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...