If you can create arbitrary collisions with something cryptographically secure like SHA-256, malicious jquery is probably the least of our worries.