ZegnatAnd if you have no JavaScript of your own at all, you can actually add a short header to the server response that tells the browser to never run JavaScript on the page. That way, even if someone sneaks scripts onto your page, they never run! :D
