4 ms·If you're loading your 3rd-party JS from an HTTP page, they already can.by chrisbolt 13y agoIf you're loading your 3rd-party JS from an HTTP page, they already can.nicholaides 13y agoSure, but it's one less avenue for a MITM attack.