Major sites running unauthenticated JavaScript on their payment pages
It would be a good idea for Chrome to display an alert similar to the non-HTTPS resource loading if integrity checks are not present for externally loaded scripts.<p>The danger of serving external JS without integrity check its is very similar to having non-HTTPS connections in your website.