7 ms·Would browser-hosted JS solve the problem?by pfraze 15y agoWould browser-hosted JS solve the problem?tptacek 15y agoNot if the HTML hosting any of the JS is under attacker control.Bootvis 15y agoCan you solve this with NoScript applied only on server side code? Or is there some clever way to bypass that too?