Then you haven't seen aggressive enough scripts. It's certainly possible using perfectly standard usage of web standards to cause a denial of service attack to most browsers in that way.