[jstarfish]

Validates output at time of rendering, so you can't trick it with obfuscation techniques.

There's a browser plugin called DeMod or something that disables it but I don't know how well it works.