When navigating to the 'Projects' view in RHPAM 7.0.x, the following files are fetched:

http://www.google.com/uds/api/visualization/1.0/40ff64b1d9d6b3213524485974f36cc0/format+en,default+en,ui+en,corechart+en.I.js
http://www.google.com/uds/api/visualization/1.0/40ff64b1d9d6b3213524485974f36cc0/ui+en.css
http://www.google.com/uds/?file=visualization&v=1.0&hl=default&packages=corechart&async=2
http://www.google.com/jsapi?key=ABQIAAAAG8LzhtshQCjpSshU_uJjmxTwM0brOpm-All5BF6PoaKBxRWWERTZER2lJ4GnsG8nvhKLOQ20degaEQ&callback=__gwt_AjaxLoader_onLoad

And in the process instance view:
http://ajax.googleapis.com/ajax/static/modules/gviz/1.0/core/tooltip.css

For security sensitive clients it is a huge risk that their components interact with external services like google. If these resources are required to provide the full functionality of the UI, we should consider adding a system property to give the choice between
a) full functionality with resources being fetched from the internet and
b) limited functionality, but no external resources required.