3 ms·

I'd be more worried about my UA not being able to handle that scenario by just refusing to run that javascript payload.