HUE-1310 [core] External js reference triggering security alerts

Moved to local file