3 ms·

Fair enough. Though in practise a HTML inject on a login page will have the same impact, usually eh?