But plenty of people use NoScript[1,2] and similar configurable blockers When you open a new website, only the previously whitelisted JS sources are enabled, a

But plenty of people use NoScript[1,2] and similar configurable blockers When you open a new website, only the previously whitelisted JS sources are enabled, and you can individually check out the initially disabled sites to see if you want to trust it to run on your machine. So, yes, having some default information about the code required to view the basic site would definitely be helpful, and help build trust. [1] https://github.com/hackademix/noscript https://github.com/hackademix/noscript [2] https://en.wikipedia.org/wiki/NoScript#ClearClick_(anti-clickjacking) https://en.wikipedia.org/wiki/NoScript#ClearClick_(anti-clic...