from jquery.com, github.io, w3.org. They should be mirrored locally. It may be strange that the tool loads JQuery twice (one from toolforge, another from w3.org).
|Open||None||T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions|
|Open||None||T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses|
|Open||None||T172065 Hunt for Toolforge tools that load resources from third party sites|
|Open||None||T227277 shex-simple tool loads various 3rd party resource|