The browser is "generic code" that provides the UX we use all day, every day.

REST includes allowing code to be part of the response from a server, there are the obvious security issues, but the browsers (and the standards) have dealt with a lot of that.

https://ics.uci.edu/~fielding/pubs/dissertation/net_arch_sty...