Your ISP probably injects it, but you may not know for sure that it could be a person in an average attack. Whoever and whatever it may cause problems. If someone can enter things on your page, others can too.
- TLS (HTTPS) .
TLS, - CloudFlare TLS Let encrypt .