Hi all,

we are using an external javascript library on a community. Actually we loaded the content of the javascript in a static resource (as documentation describes for jquery integration) . Unfortunately for some reason the 3rd party vendor expect to reload the content of the JDK so that they can address new features / bug fixing without release a new version of the file. There is a way to achieve this result such as using a CDN or reload the content of the static resource or some other suggested approach?

I also understand that this appoach is not really correct from security point of view because this represent an exception and let the ability to change the content of the javascript dynamically without any control on it, so that I would like to be sure to address in correct way.

Many thanks

Andrea 

UPDATE: assuming CSP configured, is possible to load the JS directly with:

<ltng:require scripts=”https://externalDomain/externalPathToJs/JsFileName.js” />