You forgot escape & encoded and eval()'ed inline javascript in DOM that inserts a <script> tag that bootstraps another URL-rewrited dynamically generated .js. A

You forgot escape & encoded and eval()'ed inline javascript in DOM that inserts a <script> tag that bootstraps another URL-rewrited dynamically generated .js. And the best part is, the .js can not be re-requested as it's it's taken cautions to prevent re-play attack.