Use local JS instead of remote JS.

Also, this JS doesn't do `document.write`, or half-assed escaping so it should be quite a bit more resilient / less prone to man-in-the-middle script injection attacks...