Over the last couple of weeks I’ve run some analysis on the one million most popular sites on the web. External resources, risky business What started off as a simple question (how many sites use externally hosted resources) turned into an ever expanding project to answer questions about websites engaging in risky behavior. The reason this interested me is that I believe that every externally hosted javascript is essentially a huge gaping hole in a website.