HUMAN VERIFICATION REQUIREDASVS 3.5.7 No authorized data in scripts
MB-C18ASVS Level 3 Human AssuranceMedium
Data requiring authorization is not included in script resource responses, like JavaScript files, to prevent Cross-Site Script Inclusion (XSSI) attacks.