Compute Subresource Integrity (SRI) hashes for external scripts and stylesheets. Add the integrity= attribute to ensure the file hasn't been tampered with.
Requires CORS. Most CDNs (jsdelivr, unpkg, cdnjs) support it. Self-hosted URLs need Access-Control-Allow-Origin.
—