Writing Signed Scripts
First, identify inline scripts to be signed: <SCRIPT … ARCHIVE="some.jar" ID="1">
The script ID must be unique in the JAR
JavaScript source files don’t need an ID: <SCRIPT … ARCHIVE="some.jar" SRC="file.js">
Note: Only one ARCHIVE attribute per document is necessary, in which case all signed objects are stored in a single JAR