Reply To: Javascript vulnerability?