These should almost certainly be generated.
And use relative URL in script tag so it is served locally.