Or it can run as part of a checkout wizard's "verifying your browser and processing your payment, don't close your tab" step.