Topic: Userscripts.org discussion / Cookie Stealing Scripts

Jonny-
Javascript is extremely flexible and powerful. Even if Greasemonkey were to (somehow) only allow some subset of Javascript, it's virtually certain that a determined bad guy could use the remainder to do something bad. Most web companies try not to allow *any* javascript on their pages, yet, cross-site scripting holes are reported each week.

Joel -- don't forget about adding or changing img src attributes.

miles