On Fri, Jun 5, 2009 at 1:17 AM, John at Darkstarvacuum@jeb.no wrote:
You don't have to inject javascript to do user tracking. This is possible with all kind of raw html that leads to inclusion of external elements, including style defs for ordinary markup.
The point on CSS is a good one. The site-wide stylesheets can use url(), which would be enough for tracking even with no raw HTML or JS allowed. Of course, JavaScript can allow more extensive and useful tracking, which is why it's used by things like Analytics.