> The real solution is that your build system should separate the CSS from JS during build time. Not many popular build systems (such as create-react-app) suppo

> The real solution is that your build system should separate the CSS from JS during build time. Not many popular build systems (such as create-react-app) support this. The real solution is to fix the actual protocol issues, instead of imposing arbitrary limitations on what scripts can do with the page. If you pause and think about what these security measures are aiming to mitigate, they themselves are at best amateurish.