I guess, but it would have to download the script before hand,check the hash,then append the script somewhere. I dont see any other technique."document.write" i

I guess, but it would have to download the script before hand,check the hash,then append the script somewhere. I dont see any other technique."document.write" is only efficient while the page itself is loading. It's an interesting problem nevertheless, and could be extended to any link or src attributes in tags. In case the hash and the file dont match,the browser wouldnt load that file.