Wow! You still have Javascript enabled?

I switched that off years ago in my browser. The legitimate uses it once had have by and large been replaced by the correct use of CSS. It's true that as a result I sometimes encounter a site that doesn't work correctly, but that's ok, because in the words of Jamie Zawinski... "that's just fine -- because sites that do this invariably ALSO DON'T HAVE ANY CONTENT ON THEM".

Just don't go around pressing buttons on homenodes, it's as simple as that. If you can't resist that, at least read the source beforehand, to know what you're getting yourself into.

As late as a few years ago, a senior monk had a Javascript that would send your PM password if you clicked the right button. It may still be there. Cave canem and all that.

Javascript buttons are part of the Perlmonks Experience™, the place wouldn't be the same without them.

update: I didn't realise it was automatic, rather than having to click on a button. Indeed, that's different, but not different enough IMHO, to make a difference.

Just surf with Javascript disabled. Everywhere, all the time. It's basic 'net hygiene. Modern browsers make it really simple to switch on and off, no grovelling in preferences required. The user should be applauded for making people think about this.

Second update: by "Javascript disabled everywhere", I should explain out that I mean "Javascript disabled by default". Firefox, to speak of the browser I use, has an extension called Noscript, which allows you to choose whether or not you want to execute the Javascript they want you to execute. So for the sites that need it, all is well.

What is truly amazing when you use this extension, is the number of sites that do use Javascript, more or less for gratuitous purposes. If you don't know why a site needs to use Javascript, don't let them. It's like running with taint checks.