I'm favouring bower over CDNs these days. No risk of XSS.