Change external scripts to only use read-only URLs