Comment by colinclerk

Thank you for calling out the headers. We'll work to resolve right away.

And agreed on the CDN JS. We'll move these assets to the customer's domain.