Is this legit?

See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script

> `script` elements with an `src` attribute specified should not have a script embedded within its tags.