I hope they develop additional measures soon, but expect the big endpoint security companies who use sandboxes, to adapt first. If they can inspect and run the embedded code in a safe location first, to determine maliciousness, that will go a long way for their customers. Longer term, the standard needs to be changed and companies must do better in monitoring their websites for ANY unauthorized alterations.