4 ms·

But the people you're defending against don't do that. They also don't load CSS but for some reason the security theater PoW won the mindshare.

• econ 3mo ago
  I once discover you can put escaped XML or json in css content. The purpose was to have static data sets that work cross domain. No headers to configure no letting strangers run all you can eat malicious js on your site.
• antonvs 3mo ago
  Security theater is what gets the economic rewards.