While not an option for everyone, serving static content from a different domain is another way to avoid this bug.