While it may be hard to migrate existing applications, since about 2 year I've started building all applications with externalized javascript. So sticking to t

While it may be hard to migrate existing applications, since about 2 year I've started building all applications with externalized javascript. So sticking to that rule for new stuff can greatly increase security.