My immediate reaction to the JS snippet was “luckily i disable JS by default”