Well (short of dnssec) dns inherently lacks integrity protection, so it's a bug to use dns as a basis for trusting 3rd party js.
Here's a radical idea: browsers could disable all execution of js from non-https sources (including same-site).
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Here's a radical idea: browsers could disable all execution of js from non-https sources (including same-site).