The idea is really nice, but since this is client-side, it can easily be avoided: https://disk.yandex.com/i/u_yuF6BhxMVF2Q I can just block the entire staticshield.vercel.app domain and add some custom CSS to bypass staticshield. This is not a very secure solution. Also, the page that informs you that you need to enable javascript ( https://staticshield.vercel.app/errors/noscript )... does not work without javascript