Load external JS securely