now find a way for me to enter an unknown/untrusted website that is using your "ddos protection" without having to allow inline javascript to execute because a

now find a way for me to enter an unknown/untrusted website that is using your "ddos protection" without having to allow inline javascript to execute because as you clearly know/demonstrate, the web can't be trusted by default