The point still stands. Some wordpress install that references &#x2F;parralax-plugin.js could be hijacked to server malicious JS with an immutable header.<p>A possible solution would be to only use the immutable header with integrity html tag.