I just want to mention (1) I view this as a bad thing and think we ought to try to move away from it; (2) I whitelist javascript so at least not all of the above is happening to me, and I think we ought to move toward all users having the tools and competence to do the same.