This seems a little redundant - why not just<p><pre><code>    &lt;script src=&quot;jQuery-1.12.2.min.js&quot; sha-256=&quot;31be012d5df7152ae6495decff603040b3cfb949f1d5cf0bf5498e9fc117d546&quot;&gt;&lt;&#x2F;script&gt;
</code></pre>
? If you wanted to explicitly fetch from google if the client doesn&#x27;t have a cached copy, then instead do<p><pre><code>    &lt;script src=&quot;https:&#x2F;&#x2F;ajax.googleapis.com&#x2F;ajax&#x2F;libs&#x2F;jquery&#x2F;1.12.2&#x2F;jquery.min.js&quot; sha-256=&quot;31be012d5df7152ae6495decff603040b3cfb949f1d5cf0bf5498e9fc117d546&quot;&gt;&lt;&#x2F;script&gt;
</code></pre>
The first would seem preferable though, as loading from an external source would expose the user to cross-site tracking.