So what is the point of trashing the Javascript URI? People with malicious intent will just have the person make the code into a bookmarklet and run it. Which is actually easier than explaining how the URL bar works.

Or does it do what Chrome does and you can't copy/paste Javascript: until the URL bar you have to type "Javascript:"?