[whatwg] Please disallow "javascript:" URLs in browser address bars

[Nikita Popov]

On 24.07.2010 02:33, Bjartur Thorlacius wrote:
>
> Wrong.  Plain wrong. Kids who like to test stuff do things like this. I
> do agree though that the urlbar isn't the right place, there should be
> a different prompt for this kind of stuff.  Probably disabled at compile
> time by default and accessible by recompile (or addon).
>    
Not everybody who executes JavaScript Code using the address bar is a 
Linux freak who knows how to compile a browser. This mustn't be a 
hard-accessible configuration option.

I really don't like the idea of disallowing it totally. It should 
suffice to prompt the user whether he is sure he want's to execute the 
script.