[TBurette]

The goal is to prevent any way for attackers to inject code.

Bookmarklets and user scripts are collateral damage.

[andai]

That's probably the right choice, but it sounds like there should be a "captcha" to separate programmers from non-programmers.

The browser remains in a locked down kiddie mode until you solve these riddles three!