Two issues, testing back to back scripts:<script async="" src="https://www.google.com/recaptcha/api.js"></script><script src="https://www.google.com/recaptcha/api.js" async="" defer=""></script>
Issue (integrity attribute not included): <link rel="stylesheet" href="https://portswigger.net/content/images/logos/portswigger-logo.svg">
Issue (integrity attribute not included): <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
Not an issue (integrity attribute included): <script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC" crossorigin="anonymous"></script>
Not an issue (integrity attribute included and loaded from host domain): <script src="http://localhost:8002/scripts/somescript.js"#34; integrity="sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb==" crossorigin="anonymous"></script>
Not an issue (integrity attribute included): <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css" integrity="sha384-604wwakM23pEysLJAhja8Lm42IIwYrJ0dEAqzFsj9pJ/P5buiujjywArgPCi8eoz" crossorigin="anonymous">
Not an issue (loaded from host domain): <link rel="stylesheet" href="http://localhost:8002/scripts/somestylesheet.css">
Not an issue (loaded from host domain via relative path): <script src="scripts/somescript.js"></script>