The index page is protected via CSP. The "bootstrap" page which unzips the page isn't but it could. I just did not include it for some reasons I've forgotten.
The JS is not essential, there's nothing to stop you treating the file as a ZIP file and unzipping it beforehand to view it.