Comment by conartist6

7 hours ago

Is anyone talking about any web page being a zip bomb even without JS turned on?

How would that work? I think you posted something on the github but I don't think what you're conceiving here is possible with this API. It just reroutes HTML insertions from the template to a different location, there is no duplication.