When developing a webapp, never trust user submitted data or depend on Javascript, they may be running noScript, they may be using Lynx (I do regularly), you can test if JS is enabled by having a script on the page submit a js=true parameter and provide a js enabled page, but don't presume it's running