Download: Add subresource integrity to CDN examples

[kborchers]

We also need to add the hashes for people to use to code.jquery.com which is being tracked in jquery/codeorigin.jquery.com#20 and should add this where ever it makes sense on other project sites referring to using the CDN

[mgol]

Looks good, it'd be nice to have it described how to generate those for the sake of future releases. This instruction should be linked to from https://github.com/jquery/jquery/wiki/Release-process.

[scottgonzalez]

We shouldn't need to manually generate these during releases though. The CDN repo should be generating these and displaying them as part of jquery/codeorigin.jquery.com#20. You'll just need to copy and paste the values as part of the release when you update the URLs on the download page.

[dmethvin]

What I did instead in c869920 was remove the script tag entirely and point people over to the CDN to get the tags with SRI included. That way we don't need to maintain that info here, and people can get the SRI tag for any version not just the current one. I am pretty sure that people would have tried copying the tag verbatim from this page and then editing the file version with bad results, because people.