3) The CDN would be able to track your website users, and there's already too many organizations doing that (NSA included).
Not only that, they would be able to take control of all of your pages: <https://www.owasp.org/index.php/BeNeLux_OWASP_Day_2012#LievenDesmet>
To be safe all JavaScript must be downloaded from your site. You'll manually have to track updates to scripts though.
-- Regards, Johan --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org