I'm rather reluctant to allowing websites to execute Javascript, since that is the most common attack vector (just after malicious files send via email/instant messager). Recent events (like https://arstechnica....-vulnerability/) do not serve to highten my trust in web based scripting languages and you never know what stuff malcontents might try to sneakily infuse into a legitimate web service.
Just my 2C-Bill.


















