rithvikvibhu/GHLocalApi#20 (comment)
> looking at the page's source, it pulls some Javascript off of gc.kis.v2.scr.kaspersky-labs.com over HTTP. Compromise DNS, inject your own Javascript into the Google Home app, ????, profit?

Can't confirm - in my case it's just plain HTML with no dependencies apart of content.min.css.
EDIT: content.min.css is not from that source 🙈 It's a part of Chrome extension...

So it might be either some browser extension that injects it locally on your side, or we have different files ;-)
Cheers

Originally posted by @kubawolanin in rithvikvibhu/GHLocalApi#20 (comment)