LibreJS whitelists scripts based on a hash of the file's contents, not what url it comes from. It wouldn't make sense to whitelist scripts coming from ajax.googleapis.com -- how would we know that those scripts are appropriately licensed?

Reply via email to