random length HTML comments to mitigate BREACH attacks