Verify that HTML script and link resources have not been modified.
<script src="proxy.php?url=https%3A%2F%2Fajax.googleapis.com%2Fajax%2Flibs%2Fjquery%2F2.2.0%2Fjquery.min.js"
integrity="sha384-K+ctZQ+LL8q6tP7I94W+qzQsfRV2a+AfHIi9k8z8l9ggpc8X+Ytst4yBo/hH+8Fk"
crossorigin="anonymous"></script>
Browser supports subresource integrity:
https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity