Third-Party scripts without subresource integrity
Third-Party scripts dynamically added