Security Headers
Subresource Integrity (SRI): trusting the CDN you do not control
When you load a script from a CDN, you are trusting that server to send the exact file you expect. Subresource Integrity makes the browser verify it instead of taking it on faith.