[cxr]

> e.g., putting the tar in a <textarea>'s RCDATA; do browsers support "binary" data in there correctly?

A <script> data block would be the officially sanctioned way to do it. (This use case is part of the spec.)