I though for BREACH to work, the user input have to echo on the page, together with the secret. So that when they repeat, the compression size reduce. If we di

I though for BREACH to work, the user input have to echo on the page, together with the secret. So that when they repeat, the compression size reduce. If we didn't echo any user input data to the page, then we aren't affected by BREACH, right?