There are two script tags on this page. They load the same remote script, but one has a valid SRI integrity attribute and the other has an invalid SRI integrity attribute.
Valid hash:
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js" integrity="sha256-cCueBR6CsyA4/9szpPfrX3s49M9vUU5BgtiJj06wt/s=" crossorigin="anonymous"></script>
Invalid hash:
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js" integrity="sha256-invalidHash" crossorigin="anonymous"></script>
Follow