4 ms·It's not an option. Attacker can set getter on location.domain to bypass thath "JS protection".by homakov 13y agoIt's not an option. Attacker can set getter on location.domain to bypass thath "JS protection".homakov 13y agolocation.__defineGetter__('host',function(){return 'google.com'}) undefined location.host "google.com"ivanhoe 13y agoThat's a good point, haven't thought of that. So the idea sucks...