4 ms·

Wouldn't help, would it? The Attacker would just change the template to not have a url bar (or a url bar with just the domain).