@lx No, that's not true. XSS blocker and other things are to be included… https://hackademix.net/2017/11/14/double-noscript/