Is it possible to disable xslt rendering today already, perhaps with a browser flag? For security.