[andor]

Some people have valuable data inside their browsers. Javascript code can access this data.

Also, browsers aren't bug-free, and enabling Javascript significantly increases the attack surface.

[tokenizerrr]

Like what kind of data?

[straight_talk]

Seriously?

http://en.wikipedia.org/wiki/Online_banking

http://en.wikipedia.org/wiki/Cross-site_scripting

[tokenizerrr]

Except that Javascript cannot access that, unless some glaring design flaws have been made.

If you disagree with me, and believe it can, I would just love to see a webpage that dumps out valuable data inside my browser. I'll visit it without any browser plugins using the same session I have been using for over a month, promise!

[straight_talk]

A human would never make "glaring design flaws".